Privacy Policy

This Privacy Policy (“Policy”) describes how Autosoft Global LLC (“Autosoft,” “we,” “us,” or “our”) collects, uses, and protects information obtained through autosoftglobal.com (the “Site”). This Policy covers the corporate website only. Privacy practices for our products — Autosoft Voice and Autosoft Clinic — are governed by their respective product Privacy Policies.

1. Information We Collect

We collect information you provide voluntarily and information collected automatically when you visit the Site.

Information you provide:

• Contact and inquiry data: Name, email address, company name, job title, and message content when you submit a contact, demo request, or partnership inquiry form
• Newsletter and communications: Email address when you subscribe to Autosoft updates or marketing communications
• Event and webinar registrations: Name, email, and company information if you register for Autosoft-hosted events

Information collected automatically:

• Usage data: Pages visited, time spent on pages, referring URLs, and navigation paths
• Device and browser data: IP address, browser type and version, operating system, screen resolution, and device type
• Cookies and tracking technologies: Session identifiers, analytics cookies, and preference cookies (see Section 6)

2. How We Use Your Information

• Respond to inquiries: Process and respond to contact form submissions, demo requests, and partnership inquiries
• Communications: Send newsletters, product updates, and event invitations to subscribers who have opted in
• Site analytics: Understand how visitors use the Site to improve content, navigation, and performance
• Security: Detect and prevent fraudulent activity, spam submissions, and unauthorized access to our systems
• Legal compliance: Comply with applicable laws, regulations, and legal process

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Data Sovereignty and Client Data

All client and prospect data shared with Autosoft remains the property of the respective client or organization. We implement strict data isolation protocols to ensure that information processed in the context of a business engagement is never used for secondary purposes, shared with competitors, or commingled with other client data. Autosoft does not use client business data to train AI models or to derive commercial intelligence for third parties.

4. Third-Party Service Providers

We engage trusted third-party service providers to operate the Site and deliver services. These providers are authorized to use your information only as necessary to perform services on our behalf and are contractually required to maintain appropriate security standards. Categories of providers include:

• Web hosting and infrastructure: Cloud compute and content delivery (data stored in the United Kingdom, GCP europe-west2)
• Email delivery: Transactional email and newsletter distribution
• Analytics: Anonymized site usage analytics (no cross-site behavioral tracking)
• CRM: Contact and inquiry management for sales and support workflows

We do not share personal information with advertising networks or social media platforms for behavioral targeting.

5. Infrastructure Security

Autosoft implements a security-first approach to data protection, including:

• TLS 1.2 minimum (TLS 1.3 preferred) encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls limiting internal access to personal data to authorized personnel with a documented need
• Multi-factor authentication required for all personnel with access to systems containing personal data
• Regular security assessments and sub-processor security certification reviews

In the event of a personal data breach, we will notify affected individuals and applicable regulatory authorities in accordance with applicable law.

6. Cookies and Tracking Technologies

The Site uses the following categories of cookies:

• Strictly necessary: Session management, security, and authentication. These cannot be disabled.
• Performance and analytics: Anonymized data on how visitors use the Site, used to improve content and navigation. EEA/UK visitors are asked for consent before these are set.
• Functional: User preferences such as language and display settings.

You may manage cookie preferences via your browser settings. Note that disabling cookies may affect certain Site functionality.

7. Data Retention

• Contact and inquiry data: Retained for up to 3 years from last contact to support ongoing business relationships, then deleted or anonymized
• Newsletter subscriptions: Retained until you unsubscribe. Unsubscribe links are included in every marketing email.
• Site analytics data: Retained in anonymized, aggregated form for up to 24 months
• Security logs: Retained for 12 months to support incident investigation and threat detection

8. Cross-Border Data Transfers

Autosoft’s primary infrastructure is located in the United Kingdom (GCP europe-west2). Where personal data of EEA residents is transferred to third countries without an EU adequacy decision (e.g., to US-based service providers), we rely on European Commission Standard Contractual Clauses (SCCs — Commission Implementing Decision (EU) 2021/914) incorporated into applicable Data Processing Agreements. UK data transfers are governed by the UK International Data Transfer Agreement (IDTA) or UK Addendum to EU SCCs as applicable.

9. GDPR Rights (EEA, UK, and Switzerland)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

• Right of Access (Art. 15): Obtain confirmation of and access to personal data we hold about you
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data
• Right to Erasure (Art. 17): Request deletion of personal data where it is no longer necessary or where you withdraw consent
• Right to Restriction (Art. 18): Request that processing be restricted in specified circumstances
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests, including direct marketing

To exercise these rights, contact us at privacy@autosoftglobal.com. We will respond within 30 calendar days. EEA residents may lodge a complaint with their national data protection supervisory authority.

Lawful basis for processing: We process contact and inquiry data on the basis of legitimate interests (responding to business inquiries) and, where required, consent (newsletter subscriptions). We process security and compliance data on the basis of legal obligation.

10. CCPA / CPRA Rights (California Residents)

California residents have the right to know what personal information we collect, request deletion of their personal information, and opt out of any sale of personal information. Autosoft does not sell or share personal information for cross-context behavioral advertising. To submit a CCPA rights request, contact privacy@autosoftglobal.com. We respond within 45 calendar days.

11. Children’s Privacy

The Site is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, contact us at privacy@autosoftglobal.com and we will promptly delete it.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be indicated by an updated “Last Updated” date at the top of this page and, where required, by direct notification to affected individuals. Continued use of the Site after changes take effect constitutes acceptance of the updated Policy.