Privacy Policy & Data Protection Commitment

1. Information We Collect

We collect information in two primary categories: information you provide directly, and technical diagnostics generated when interacting with our digital interfaces.

• Direct Project Information: Name, professional email address, corporate telephone number, company identity, project briefs, and technical specifications provided through our consultation forms.
• Payment & Billing Data: Commercial transactions are processed securely through tier-1 payment gateways (Stripe, PayPal, wire transfers). FusionTrix never stores raw credit card numbers or banking secrets on our servers.
• Diagnostic & Telemetry Data: IP addresses, browser user-agents, operating system identifiers, and referrers collected exclusively for cybersecurity logging, DDoS mitigation, and server performance monitoring.

2. How We Use Your Data

We strictly process collected information under valid legal bases: contractual necessity, legitimate interest in platform security, and explicit client consent.

• Delivering scoped software engineering, UI/UX design, and brand identity deliverables.
• Administering billing, project milestones, invoices, and service-level notifications.
• Maintaining infrastructure security, preventing fraud, and adhering to international legal obligations.

3. Client Source Code & IP Protection

We treat your source code, algorithms, business logic, customer lists, and proprietary assets with enterprise-grade confidentiality.

4. Cookies & Tracking Technologies

Our website uses privacy-conscious cookies. We do not participate in cross-site behavioral retargeting networks or data broker exchanges.

• Strictly Necessary Cookies: Session security and load-balancing tokens essential for website navigation.
• Performance Telemetry: Aggregated, anonymized latency measurements used to optimize Core Web Vitals and CDN cache ratios.

5. Third-Party Infrastructure & Processors

We partner exclusively with SOC 2 Type II and ISO 27001 certified cloud infrastructure providers:

• Cloud Hosting & CDN: Amazon Web Services (AWS), Cloudflare Enterprise, DigitalOcean.
• Source Code Management: GitHub Enterprise (encrypted at rest and in transit).
• Payment Processing: Stripe Inc. and PayPal Inc. (PCI-DSS Level 1 certified).

6. Global Data Transfers & Compliance

When data is transferred across international jurisdictions, we enforce European Commission Standard Contractual Clauses (SCCs) and appropriate supplementary technical safeguards (including TLS 1.3 in-transit and AES-256 at-rest encryption) to guarantee an equivalent standard of protection.

7. Your Legal Privacy Rights

Regardless of your geographic location, FusionTrix extends universal data rights conforming with GDPR and CCPA/CPRA standards:

• Right of Access: Request a full copy of personal data processed by FusionTrix.
• Right to Rectification: Request correction of inaccurate or incomplete corporate records.
• Right to Erasure ("Right to Be Forgotten"): Request permanent deletion of non-statutory records.
• Right to Restrict Processing: Request suspension of specific processing workflows.

8. Retention & Secure Disposal

We retain project records only as long as necessary to fulfill contractual warranties, comply with financial audit regulations (typically 7 years for tax accounting), and support ongoing client maintenance retainers. Expired records are cryptographically wiped in accordance with NIST 800-88 guidelines.