Privacy Policy & Client Data Protection.
At PregioSoft, trust and confidentiality are fundamental engineering standards. This policy outlines our commitments to data security, client intellectual property, strict AI model isolation, and regulatory compliance.
Confidential AI Guarantee
Zero model training on proprietary client data or source code.
100% Data Sovereignty
Dedicated single-tenant databases and private VPC isolated instances.
End-to-End Encryption
AES-256 at rest, TLS 1.3 in transit with cryptographic key isolation.
GDPR & CCPA Compliant
Full rights of access, portability, rectification, and irreversible deletion.
Our Core Principle: Your Data & Source Code Belong Exclusively to You
PregioSoft engineers custom software as a work-for-hire service. We never monetize, broker, or feed client data into shared artificial intelligence models. Every custom system is architected with sovereign data boundaries and complete client ownership.
Scope & Applicability
This Privacy Policy applies to all individuals and organizations that interact with Pregio Software LLP ("PregioSoft", "we", "us", or "our"), including visitors to pregiosoft.com, prospective clients participating in technical scoping consultations, and active enterprise clients commissioning custom software engineering, applied AI integrations, and business workflow automation systems.
When a client enters into a Master Services Agreement (MSA) or Statement of Work (SOW), the specific confidentiality, security, and data governance provisions of that agreement supplement and reinforce this policy.
Information We Collect & Receive
We adhere strictly to the principle of data minimization. We only collect information necessary to scope, architect, deliver, and support software solutions:
- Direct Inquiries & Consultations: When you contact us through our website or schedule a technical consultation, we collect your name, business email address, company name, telephone number, and the operational requirements or project brief you submit.
- Client Technical Architecture Data: During formal engagements, we may receive technical documentation, API keys, database schemas, and sample operational datasets necessary for integration. All such data is governed by mutual Non-Disclosure Agreements (NDAs).
- Technical Telemetry & Server Logs: Standard web server logs collect IP addresses, browser user agents, and referral pages for DDoS mitigation, infrastructure health, and security threat detection. We do not use third-party invasive advertising trackers.
Confidential AI & Zero Model Training Guarantee
As an applied AI and custom software firm, we maintain the highest standard of machine learning ethics and trade secret protection:
Enterprise Infrastructure Security & Cryptography
We implement industry-leading technical and organizational security measures to protect your information against accidental loss, unauthorized access, alteration, and disclosure:
- Cryptographic Protection: All data in transit is encrypted using Modern TLS 1.3 with strict cipher suites. Data at rest is encrypted using AES-256 with client-managed or dedicated AWS KMS / GCP Cloud KMS encryption keys.
- VPC Isolation: Staging and production systems are segregated within private subnets protected by Next-Gen Web Application Firewalls (WAF), automated rate limiting, and DDoS mitigation.
- Access Controls & Auditing: Engineers access infrastructure using hardware security keys (FIDO2/WebAuthn), short-lived certificate-based SSH/VPN sessions, and mandatory multi-factor authentication (MFA). Full immutable audit logs are preserved for all access events.
Data Retention, Handover & Irreversible Deletion
We retain personal data and project telemetry only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or satisfy contractual warranty periods.
Upon project delivery and final milestone settlement, all custom source repositories, database backups, and cryptographic keys are formally transferred to your control. Upon written request, all staging environments, test fixtures, and residual temporary build data are securely wiped in accordance with DoD 5220.22-M / NIST SP 800-88 sanitization standards.
Your Legal Privacy Rights (GDPR, CCPA & Global Frameworks)
Regardless of your geographic location, PregioSoft affords you full autonomy over your personal data:
Right to Access & Portability
Request a complete, machine-readable export of all personal data we hold about you.
Right to Erasure ("Be Forgotten")
Demand the immediate and irreversible deletion of your data from our active systems.
Right to Rectification
Correct inaccurate, outdated, or incomplete personal and corporate profile details.
Right to Object & Restrict
Restrict specific data processing activities or revoke previously granted consent at any time.
Data Protection Officer & Inquiries
If you have any questions, regulatory requests, or concerns regarding this Privacy Policy, or wish to exercise your statutory rights, please contact our Data Protection Office directly: