Privacy Policy

1. Information we collect

You do not need to complete the contact form to browse this website. If you choose to contact us, we collect:

• Name (required)
• Email address (required)
• Company (optional)
• Your message (required)

Name, email address and message are required so that we can respond to you. Company is optional.

We do not use analytics or advertising trackers. Our hosting provider, Microsoft Azure, automatically records limited technical data in server logs when you visit, such as:

• IP address
• Browser type
• Pages visited
• Date and time of the visit

2. How we use your information

We use the information you send us only to:

• Respond to your enquiry and any correspondence that follows
• Keep the website and our systems secure and prevent abuse
• Comply with legal obligations that apply to us

We do not sell personal data, we do not share it with third parties for their own marketing, and we do not use it for advertising or profiling. We disclose it only to the service providers listed below, or where the law requires us to — for example, in response to a valid request from a public authority.

3. Legal bases for processing

Where EU, EEA, UK or similar data protection law applies, we rely on the following legal bases:

• Taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) — when your enquiry concerns working with us
• Our legitimate interest in answering enquiries and keeping the website secure (Article 6(1)(f) GDPR)
• Compliance with legal obligations (Article 6(1)(c) GDPR)
• Your consent (Article 6(1)(a) GDPR) — for Google Analytics only, which runs solely if you accept it

We do not rely on consent for the contact form: sending us a message is your own action, and the processing it triggers rests on the bases above. Analytics is the one exception — it runs only on your consent, and you can withdraw that at any time.

4. Cookies, local storage and analytics

This website stores a single display preference — your light or dark theme choice — in your browser's local storage, together with your analytics choice once you make one. Neither value leaves your device, and you can remove both by clearing your browser data.

All fonts and other assets are served from our own domain. Unless you accept analytics, loading a page sends no request to any third-party service and sets no cookies.

With your consent, we use Google Analytics 4 to measure how this website is used, so we can see which pages are useful and improve the site. Nothing is loaded and no analytics cookies are set until you choose “Accept analytics”. If you decline, or make no choice at all, no Google tag is loaded and no analytics data is collected.

When analytics is active, Google Analytics may collect:

• the pages you view, and the date and time of the visit
• the site or search engine that referred you
• your browser and device category
• an approximate country or region
• pseudonymous client and session identifiers

After you accept, Google Analytics sets two first-party cookies in your browser, _ga and _ga_<container-id>. We configure them to expire about 13 months after your first visit, measured from that first visit rather than extended each time you return.

Google derives the approximate country or region from the IP address of your request. We do not receive or store your full IP address in Google Analytics.

We do not use Google Analytics for advertising, remarketing, profiling or automated decision-making. Advertising storage, advertising personalisation and Google signals are switched off in our configuration.

You can change or withdraw your choice at any time through “Analytics settings” in the footer of any page. Withdrawing removes the Google Analytics cookies from your browser and stops further collection; it does not affect data already collected before you withdrew.

Google processes this data as our analytics provider. Its own explanation of the data it receives from sites using its services is set out in how Google uses information from sites that use its services.

When you follow a link to another website, including a NeoSoft platform website or LinkedIn, that website's own privacy notice applies.

5. Service providers

We use a small number of service providers to run this website, each acting on our instructions:

• Microsoft Azure — hosts the website and records the server logs described above
• Azure Communication Services — delivers contact form submissions to us by email
• Microsoft 365 — provides the business mailbox where your messages are stored once delivered
• Google — provides Google Analytics, and receives data only if you accept analytics

The three Microsoft services are covered by the Microsoft Products and Services Data Protection Addendum. Google processes analytics data under its own data processing terms. We do not share your data with any other third party, except as described in section 2.

6. Data retention

We keep personal data only as long as we need it for the purposes above. In practice:

• Contact enquiries and the related email exchange are kept while we handle your request and for up to 24 months after our last exchange, unless the enquiry leads to a business relationship — in which case the correspondence is kept as part of that relationship.
• Azure server logs are kept for a rolling period of 30 days and are then deleted automatically.
• Google Analytics data is kept for the periods configured in our GA4 property: 2 months for event data and 14 months for user-level data, the latter restarting each time the same visitor returns. Those periods govern user- and event-level data; Google's standard aggregated reports are not affected. The analytics cookies described above expire after about 13 months.

When a retention period ends, we delete the data or anonymize it. Where the law requires us to keep certain records longer — for accounting purposes, for example — we keep only what that law requires.

7. International data transfers

NeoSoft Group LLC is a United States company, and the services listed above process data in the United States. If you contact us from the European Economic Area, the United Kingdom, Switzerland or another jurisdiction with data transfer rules, your data will be transferred to the United States. For the Microsoft services we use, those transfers are covered by the safeguards in Microsoft's Data Protection Addendum, including the European Commission's Standard Contractual Clauses; Microsoft is also certified under the EU-U.S. Data Privacy Framework.

If you accept analytics, Google Analytics data is also processed by Google in the United States and may be processed in other countries in which Google operates. Google relies on the European Commission's Standard Contractual Clauses for those transfers and is certified under the EU-U.S. Data Privacy Framework.

8. Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration and misuse — encrypted connections (HTTPS) across the site, access controls on the systems where your messages are stored, and the security measures of the Microsoft platforms we build on. No method of transmission or storage is completely secure. We therefore minimize the personal data we collect and restrict access to the systems in which it is stored.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access — ask for a copy of the data we hold about you
• Rectification — have inaccurate or incomplete data corrected
• Erasure — have your data deleted
• Restriction — limit how we use your data while a question is resolved
• Portability — receive the data you gave us in a machine-readable format
• Objection — object to processing based on our legitimate interests

To exercise any of these rights, email us at privacy@neosoft.group. We will respond without undue delay and normally within one month where the GDPR applies; where the law permits additional time for a complex request, we will let you know. Exercising your rights will never be held against you.

If you are in the EU, EEA or UK, you also have the right to lodge a complaint with your data protection authority. You may contact us first, but you are not required to do so before lodging a complaint.

We do not use automated decision-making or profiling.

10. Contact

For privacy-related questions or requests, contact:

NeoSoft Group LLC
7901 4th St N, Suite 300
St. Petersburg, FL 33702
United States

Email: privacy@neosoft.group

11. Changes to this policy

We may update this policy from time to time — for example, when we change service providers or add features to the website. The current version is always available on this page, with the date of the last revision at the top. If a change ever meaningfully affects how we use personal data already collected, we will say so prominently here.