Privacy Policy

1. Introduction & Scope

This Privacy Policy governs the data processing practices of Farcube Software House ("Farcube," "we," "us," or "our") across our primary web domains, proprietary client portals, APIs, AI telemetry monitors, and custom software engineering engagements. As a provider of enterprise-grade web development, artificial intelligence implementations, and multi-tenant SaaS architecture, maintaining the absolute confidentiality, integrity, and privacy of your technical specifications and personal information is fundamental to our operational standards.

This policy applies universally to all visitors, prospective clients submitting technical briefs, enterprise partners, and registered users accessing software infrastructure deployed or managed by Farcube. By engaging our services or browsing our digital platforms, you acknowledge the processing practices detailed herein.

2. Information We Collect

We collect information strictly necessary to evaluate project requirements, execute Statements of Work (SOW), maintain system telemetry, and fulfill legal compliance obligations. Information is categorized into direct user input and automated technical telemetry:

3. How We Use Your Data

Farcube processes personal and technical data exclusively for defined, legitimate business and engineering purposes. We do not use automated algorithms to make profiling decisions without human oversight. Primary data uses include:

• Engineering Delivery & Sprint Operations: Architecting custom software, deploying cloud infrastructure, training private vector models, and conducting QA testing as specified in active SOWs.
• Security Monitoring & Identity Verification: Authenticating access to private repositories, client staging environments, and preventing unauthorized system access.
• Commercial Transactions: Processing milestone invoices, managing subscription billing tiers, and fulfilling accounting mandates.
• Client Communication & Support: Providing 24/7 SLA telemetry alerts, architectural updates, and resolving technical support requests.

4. Data Security & Confidentiality

We implement enterprise-grade technical and organizational safeguards designed to meet or exceed SOC 2 Type II and GDPR data protection frameworks. Security protocols include:

• Encryption In-Transit & At-Rest: All digital communication and data transmissions utilize TLS 1.3 protocols. Datastores, backups, and staging environments are encrypted at rest using AES-256 bank-grade encryption.
• Granular Role-Based Access Control (RBAC): Internal access to client codebases, staging keys, and credentials is restricted strictly to authorized senior engineers assigned to the specific engagement.
• Isolated Repository Architecture: Client source code is maintained in separate, private version-controlled repositories with multi-factor authentication (MFA) enforcement.
• Continuous Security Auditing: Automated static code analysis, dependency vulnerability scanning, and real-time network anomaly detection.

5. Data Sharing & Third-Party Sub-Processors

Zero Data Monetization: Farcube does not sell, rent, lease, or monetize client data or user personal information under any circumstances.

Information is shared exclusively with vetted enterprise sub-processors essential for infrastructure deployment and commercial fulfillment. All sub-processors are bound by strict contractual data processing addendums (DPAs):

• Cloud Infrastructure Providers: Amazon Web Services (AWS), Vercel Inc., and Google Cloud Platform for hosting and edge computing.
• Database & Vector Engine Suppliers: Pinecone Systems, PostgreSQL/PgBouncer infrastructure, and Supabase for isolated datastores.
• Payment Gateways: Stripe Inc. for encrypted billing and invoice settlement.
• Legal Mandates: Disclosure will occur only when compelled by valid legal subpoenas, court orders, or enforceable governmental requests.

6. Data Retention & Client Rights

Farcube retains client technical documentation, project assets, and transaction records only for as long as necessary to fulfill the engagement or satisfy statutory accounting periods (typically 7 years for financial billing records). Following engagement completion and full payment, client code repositories may be transferred or purged upon request.

Depending on your jurisdiction (e.g., EU GDPR, California CCPA/CPRA), you maintain the following rights regarding your data:

• Right of Access & Rectification: Request copies of personal data held by Farcube or correct inaccurate records.
• Right to Erasure ("Right to be Forgotten"): Request deletion of non-essential personal identifiers or staging database dumps.
• Right to Data Portability: Obtain your technical assets and data logs in structured, machine-readable JSON/CSV formats.
• Right to Withdraw Consent: Revoke authorization for marketing communications or optional analytics tracking at any time.