elegensoft
l e g e n s o f t

Privacy Policy

1. Executive Commitment to Privacy

At Elegensoft (“Company”, “we”, “our”, or “us”), we operate with the highest standards of digital ethics, data governance, and regulatory compliance. This Privacy Policy governs the processing of personal and enterprise data collected through our corporate website, SaaS platforms, proprietary software products, customer portals, and professional software engineering services. Whether you are an enterprise client, technology partner, product licensee, or prospective collaborator, your right to digital privacy, transparency, and data sovereignty is central to our operational principles.

We strictly comply with global data protection frameworks, including the General Data Protection Regulation (GDPR – EU 2016/679), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), the UK Data Protection Act, and applicable national cybersecurity laws. By accessing our services, licensing our software products, or engaging our consulting teams, you acknowledge the data collection, transmission, and processing practices detailed herein.

2. Categories of Information Collected

We limit the collection of personal and technical data strictly to what is necessary for delivering enterprise-grade software products, maintaining infrastructure security, executing contract agreements, and providing SLA-backed technical assistance. The information collected falls into three distinct categories:

A. Information Provided Directly by You

  • Identity & Corporate Metadata: Full name, professional job title, department, organization name, corporate email address, business telephone number, and physical office location provided through contact forms, product inquiry modals, and contract execution workflows.
  • Project Specifications & Engineering Inquiries: Technical briefs, architecture scopes, estimated budget tiers, timelines, technology preferences, and API requirements submitted for bespoke software development or product customization.
  • Billing & Account Information: Tax identification numbers, corporate registration details, billing addresses, purchase order references, and authorized administrative contact records. All credit card and banking transactions are processed through level-1 PCI-DSS compliant payment gateways; Elegensoft does not store raw credit card numbers or bank security codes on internal servers.
  • Support & Communications History: Records of correspondence, bug reports, feature requests, diagnostic logs, and ticketing communications transmitted via our technical support portal or designated email addresses.

B. Automatically Collected Technical & Telemetry Data

  • Network & Infrastructure Telemetry: Anonymized Internet Protocol (IP) addresses, proxy routing headers, Internet Service Provider (ISP), autonomous system numbers (ASN), browser type, rendering engine, viewport dimensions, and operating system build details.
  • Performance & Navigation Metrics: Timestamped page requests, referring and exit URLs, clickstream sequences, session duration, Largest Contentful Paint (LCP) benchmarks, and scroll-depth analytics used exclusively for optimizing application performance and responsiveness.
  • Security Verification Tokens: Cryptographic nonces, interaction timing hashes, and automated challenge signals utilized by our enterprise bot-mitigation engines to prevent Distributed Denial of Service (DDoS) attacks and malicious automated submissions.

C. Data Processed Within Enterprise Product Deployments

For proprietary software deployments (e.g., our AI Facial Recognition Attendance System or Fintech Ledger Engines), Elegensoft acts strictly as a Data Processor under GDPR Article 28. Biometric face vector embeddings, employee attendance timestamps, and financial transaction records generated on enterprise client infrastructure remain the exclusive property of the respective enterprise client (the Data Controller). Biometric mathematical vectors are computed on-premise or within isolated tenant cloud partitions and are never transmitted to shared telemetry repositories.

3. Lawful Basis and Purposes of Processing

In accordance with GDPR Article 6, we process your information exclusively under the following lawful bases:

  1. Performance of a Contract: To provision software licenses, deliver custom engineering milestones, authenticate authorized portal users, process invoices, and provide SLA-guaranteed technical maintenance.
  2. Legitimate Business Interests: To monitor system reliability, safeguard our networks against unauthorized intrusion, mitigate bot spam, optimize digital product UI/UX, and defend legal claims.
  3. Compliance with Legal Obligations: To fulfill statutory accounting, taxation, cybersecurity reporting, audit trails, and regulatory compliance standards across international jurisdictions.
  4. Explicit Consent: Where you have opted in to receive technical whitepapers, product release changelogs, architecture deep-dives, or consented to non-essential browser analytics cookies.

4. Data Retention and Lifecycle Management

Elegensoft adheres to strict data minimization and temporal limitation principles. Personal data is retained only for the duration necessary to satisfy the purposes for which it was originally collected, including the satisfaction of contractual warranty periods, active support agreements, statutory tax retention requirements, and dispute resolution limitations:

  • Sales & Project Inquiries: Retained for 24 months from the last substantive contact, after which records are cryptographically wiped or permanently anonymized.
  • Contractual & Financial Records: Retained for 7 fiscal years in accordance with standard international corporate accounting and audit standards.
  • Security & Access Logs: Retained in immutable, rolling audit vaults for 90 days before automated deletion, unless active incident investigation requires preservation.
  • Product Diagnostic Telemetry: Aggregated and stripped of all unique identifiers within 30 days of ingestion.

5. Information Sharing and Third-Party Disclosures

Elegensoft does not sell, lease, rent, monetize, or trade your personal or enterprise information to data brokers, ad networks, or external commercial entities under any circumstances. Disclosures are strictly restricted to vetted operational sub-processors bound by stringent Data Processing Agreements (DPAs):

  • Cloud & Hosting Infrastructure Providers: Enterprise-grade cloud service providers (AWS, Google Cloud, Azure) maintaining ISO 27001, SOC 2 Type II, and PCI-DSS certifications with servers located in specified data residency jurisdictions.
  • Payment Gateways & Banking Partners: Authorized financial institutions and PCI-DSS Level 1 payment gateways for invoice settlement and recurring SaaS billing.
  • Legal & Regulatory Authorities: Competent government bodies, courts, or law enforcement entities solely when compelled by binding judicial orders, subpoenas, or statutory obligations.

6. International Data Transfers & Safeguards

Where technical support or cloud routing requires data transmission across national borders, Elegensoft implements robust transfer mechanisms in full alignment with Chapter V of the GDPR. These include European Commission Standard Contractual Clauses (SCCs), UK International Data Transfer Addenda (IDTA), technical encryption safeguards (TLS 1.3 in transit and AES-256 at rest), and comprehensive Transfer Impact Assessments (TIAs).

7. Data Subject Rights & Empowerment

Regardless of your geographic location, Elegensoft honors the complete spectrum of statutory data subject rights:

  • Right of Access & Portability: You may request a machine-readable copy (JSON or CSV format) of all personal data held concerning your account.
  • Right to Rectification: You may request the immediate correction of inaccurate, incomplete, or outdated personal records.
  • Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your personal data, subject to ongoing legal or statutory retention mandates.
  • Right to Restrict or Object to Processing: You may object to data processing grounded in legitimate interests or request temporary processing restrictions during dispute evaluation.
  • Right to Withdraw Consent: Where processing relies on explicit consent, you may withdraw your consent at any time without retroactive detriment.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We respond to all verified requests within 30 calendar days without administrative fees.

8. Information Security Architecture

We deploy defense-in-depth security controls to protect information against accidental destruction, unauthorized disclosure, tampering, or malicious intrusion. Our technical framework includes mandatory multi-factor authentication (MFA), role-based access control (RBAC), end-to-end cryptographic encryption (AES-256 for data at rest, TLS 1.3 for data in transit), continuous vulnerability scanning, automated Web Application Firewalls (WAF), and annual third-party penetration testing.

9. Contact Information & Regulatory Inquiries

If you have questions, feedback, or concerns regarding this Privacy Policy or our data governance architecture, please direct your communication to our dedicated team:

Elegensoft Legal & Data Governance Directorate
Email: [email protected]
Official Website: https://elegensoft.com
Corporate Inquiries: [email protected]

Chat on WhatsApp