$ _

PrivacyPolicy

Encrypted in transit and at rest. GDPR data rights honored. Your data, your control.

LAST UPDATED2025-01-10
VERSION3.2.0
DATA PROTECTION
🇪🇺GDPR RIGHTS
HONORED
🔒ENCRYPTION
TRANSIT + REST
🧱TENANT DATA
ISOLATED
✓BACKUPS
ENCRYPTED

Data Protection

GDPR: Data subject rights honored (EU)
CCPA: Data rights honored (California)
Encryption: TLS in transit, AES-256 at rest
Tenant isolation: Every record scoped to its tenant
Backups: Encrypted, off-site, restore-tested
Access: Role-based, least privilege

Data Categories

ACTIVE

What information we collect and why.

Identity Data

Email Address
Full Name
Company Name
Job Title

Retention: 36 months. Encryption: AES-256-GCM. Purpose: Account management and authentication.

Usage Data

  • Session Data
  • API Calls
  • Feature Usage
  • Performance Metrics

Retention: 24 months. Encryption: AES-256-CBC. Purpose: Platform optimization and analytics.

Technical Data

  • IP Address
  • Browser Type
  • Device Info
  • Timezone

Retention: 12 months. Encryption: TLS 1.3. Purpose: Security and debugging.

Billing Data

  • Payment Method
  • Transaction History
  • Invoices

Retention: 84 months. Encryption: PCI-DSS Compliant. Purpose: Financial transactions and compliance.

Security Measures

ENCRYPTED

Security measures and encryption standards.

Encryption at Rest

Standard: AES-256-GCM. All data encrypted in database storage.

Encryption in Transit

Standard: TLS 1.3. End-to-end encryption for all communications.

Access Control

Standard: RBAC + MFA. Role-based access with multi-factor authentication.

Audit Logging

Standard: Application-level audit trail of administrative and data access actions.

Penetration Testing

Standard: OWASP Top 10. Regular security assessments and vulnerability scans.

Data Backup

Standard: 3-2-1 Rule. Redundant backups across multiple regions.

Your Rights

ENFORCED

Your rights under GDPR and CCPA.

Right to Access

Request a copy of your personal data. Response time: 30 days.

Right to Rectification

Correct inaccurate personal data. Response time: Immediate.

Right to Erasure

Request deletion of your data. Response time: 30 days.

Right to Portability

Export data in machine-readable format. Response time: Immediate.

Right to Restriction

Limit processing of your data. Response time: 72 hours.

Right to Objection

Object to data processing activities. Response time: 30 days.

To exercise any of these rights, contact our Data Protection Officer at [email protected]

Data Processing Locations

RESTRICTED

Primary Processing

United States: US-EAST-1 (Virginia). European Union: EU-WEST-1 (Ireland).

Backup Locations

Multi-Region: Encrypted, distributed backups. Disaster Recovery: Geographically distributed.

Transfer Safeguards

Standard Contractual Clauses: EU-approved mechanisms. Privacy Shield: Certified frameworks.

Contact Information

Data Protection Officer

Email: [email protected]
Phone: +1 (555) 123-4567
Address: 100 California St, Suite 700, SF, CA 94111

Regulatory Inquiries

EU Rep: BuildEngine EU Ltd, Dublin, Ireland
UK Rep: BuildEngine UK Ltd, London, UK
Legal: [email protected]