PrivacyPolicy

1. Introduction and Scope

Vaxen Tech Solutions ("Vaxen", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, process, and safeguard your personal information when you visit our website, use our services, or interact with us professionally. This policy complies with global data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

We collect information directly from you, automatically through your use of our website, and occasionally from third-party partners. The data we collect includes:

• Identity and Contact Data: Name, professional title, company name, email address, and phone number provided via our contact forms or direct communication.
• Technical and Usage Data: IP addresses, browser types, operating systems, referring URLs, and engagement metrics collected via standard web analytics tools.
• Project Data: Information, codebases, API keys, or designs you voluntarily share with us for the purpose of executing a Statement of Work (SOW) or evaluating a prospective project.

3. Legal Basis and Purpose of Processing

We process your data under the following legal bases:

• Performance of a Contract: To deliver software engineering services, cloud infrastructure, or consulting as requested.
• Legitimate Interests: To improve our website performance, secure our internal network against attacks, and conduct B2B marketing.
• Consent: Where required by law, we rely on your explicit consent for specific tracking technologies or email marketing lists.

4. Data Sharing and Sub-Processors

Vaxen does not sell or rent your personal data to data brokers. We only share information with vetted third-party sub-processors required to operate our business. These include our cloud infrastructure providers (e.g., AWS, Vercel), secure communication platforms (e.g., Slack, Google Workspace), and CRM tools. All sub-processors are bound by strict Data Processing Agreements (DPAs).

5. Data Security and Retention

We implement industry-standard encryption (TLS/SSL in transit, AES-256 at rest) and strict access controls on a principle of least privilege. We retain client and prospect data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable tax or commercial laws. After the retention period expires, data is securely erased.

6. Your Privacy Rights

Depending on your jurisdiction, you possess the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data ("Right to be Forgotten").
• Object to, or request the restriction of, our processing of your data.
• Request data portability to another service provider.

To exercise these rights, or if you have any questions regarding this Privacy Policy, please contact our Data Protection Officer at privacy@vaxentech.com. We will respond to all legitimate requests within 30 days.