Privacy Policy

Last Updated: August 2026

1. Introduction & Overview

Exquisite Software, Inc. ("Exquisite Software," "we," "us," or "our") respects your personal privacy and is committed to protecting the personal data and confidential information entrusted to us. This Privacy Policy describes our practices regarding the collection, storage, processing, transfer, and protection of personal information across our website (exquisite-software.com), client portals, software development applications, and related digital engineering services (collectively, the "Services").

By accessing or interacting with our Services, you acknowledge that you have read, understood, and agreed to the data collection and handling practices outlined in this Policy. If you do not agree with our policies and practices, please do not access or use our website or services.

2. Information We Collect

We collect information in several ways depending on how you interact with our website, consulting teams, and digital engineering platforms:

A. Information You Voluntarily Provide to Us

• Contact & Inquiries: Full name, corporate email address, telephone number, job title, company name, and project requirements when you complete our contact forms, request estimates, schedule consultations, or subscribe to tech insights.
• Client Onboarding & Account Data: Billing address, authorized company representatives, project specifications, architectural assets, credentials provided for integrations, and payment details processed through our secure PCI-DSS compliant payment gateways.
• Employment & Contractor Applications: Resumes, employment history, portfolio links, GitHub repositories, references, and contact details submitted through our careers portal.
• Communications: Direct communications via email, ticketing systems, video conferencing transcripts, and support messages.

B. Automatically Collected Technical Information

• Device & Browser Metadata: IP address, browser type, browser version, operating system, device identifiers, and display resolution.
• Usage & Telemetry Data: Referring URL, pages visited, clickstream sequences, time spent on pages, scroll depth, error logs, and navigation paths across our platforms.
• Cookies and Local Storage: Session tokens, theme preferences, and security authentication states stored locally on your device.

C. Information from Third Parties

We may receive professional contact details and firmographic information from reputable third-party business intelligence providers, public social platforms (such as LinkedIn), or joint marketing partners to verify identity and maintain data accuracy.

3. Legal Bases for Processing (GDPR & Global Frameworks)

Under the General Data Protection Regulation (GDPR) and related international privacy frameworks, we only process personal information when we have a valid lawful basis:

• Contractual Necessity: To fulfill our professional agreements, build custom software solutions, process invoices, and provide ongoing technical support.
• Legitimate Interests: To improve our engineering workflows, secure our networks against fraud or cyber threats, perform analytics, and market relevant enterprise services.
• Legal Compliance: To comply with tax laws, regulatory audit obligations, court orders, or statutory reporting requirements.
• Consent: Where you have granted explicit consent for direct marketing, newsletters, or optional analytical cookies.

4. How We Use Your Information

We utilize the collected information for specific, legitimate business purposes, including:

• Delivering, scoping, and executing enterprise software engineering, cloud architecture, and UI/UX design engagements.
• Processing project milestone payments, contracts, retainers, and accounting records.
• Diagnosing infrastructure performance bottlenecks, monitoring application stability, and enforcing platform security.
• Responding promptly to prospective client inquiries, project RFPs, and consultation requests.
• Providing technical insights, product updates, security advisories, and industry research articles.
• Screening, evaluating, and interviewing candidates for open engineering, design, and project management roles.
• Preventing fraudulent activities, unauthorized access, and violations of our Terms of Use.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to data brokers or third parties for advertising purposes. We only share information under strict confidentiality standards in the following scenarios:

• Vetted Sub-processors & Service Providers: Trusted third-party vendors who provide cloud infrastructure hosting (e.g., AWS, GCP), database management, secure payment processing (e.g., Stripe), CRM systems, and customer support tooling. All vendors are bound by Data Processing Agreements (DPAs).
• Corporate Affiliates: Our subsidiaries and affiliated entities under common ownership and control, strictly for operational and project delivery needs.
• Legal and Regulatory Mandates: When required by enforceable subpoenas, court orders, warrants, or applicable law to cooperate with law enforcement and regulatory bodies.
• Business Transitions: In connection with any merger, acquisition, restructuring, financing, or sale of company assets, subject to standard confidentiality protections.

6. International Data Transfers

Exquisite Software operates globally. Information collected about you may be transferred to, stored, and processed in the United States and other jurisdictions where our servers and service providers operate. When we transfer personal data originating from the European Economic Area (EEA), the United Kingdom, or Switzerland, we utilize Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent adequacy decisions to ensure robust cross-border data protection.

7. Data Retention Policy

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying ongoing client contracts, legal, accounting, tax, and reporting obligations. Client project artifacts, source repositories, and deployment logs are maintained according to the specific retention schedules agreed upon in individual Master Services Agreements (MSAs).

When personal information is no longer needed, we securely delete, anonymize, or isolate the data from further processing.

8. Data Security & Technical Safeguards

We implement multi-layered administrative, technical, and physical security measures engineered to protect personal information against unauthorized access, destruction, loss, alteration, or disclosure. These safeguards include:

• Full TLS/SSL encryption for all data in transit across public networks.
• AES-256 encryption at rest for databases, storage volumes, and sensitive credentials.
• Role-based access controls (RBAC), multi-factor authentication (MFA), and zero-trust network policies for internal systems.
• Continuous vulnerability scanning, static code analysis, and third-party penetration testing.
• Mandatory cybersecurity and data privacy training for all employees and contractors.

9. Your Privacy Rights & Choices

Depending on your jurisdiction (such as California, Virginia, the EEA, or the UK), you may hold statutory rights regarding your personal information:

• Right to Know / Access: Request details on the categories and specific pieces of personal information we have collected and processed about you.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information, subject to statutory retention exemptions.
• Right to Restrict or Object: Object to processing based on legitimate interests or direct marketing campaigns.
• Right to Data Portability: Obtain a structured, commonly used, and machine-readable copy of your personal data.
• Non-Discrimination: Exercise your privacy rights without fear of penalty, degraded service, or price discrimination.

To exercise any of these rights, please contact our Data Protection Team at [email protected]. We will respond to verified requests within thirty (30) days.

10. Cookie Policy & Tracking Technologies

Our website utilizes essential, functional, and analytical cookies to remember user sessions, secure admin interfaces, and assess aggregate website traffic patterns. You have the ability to control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may impact the interactivity or functionality of specific website features.

11. Children's Privacy

Our Services are directed exclusively to enterprise professionals, business organizations, and individuals aged eighteen (18) and older. We do not knowingly solicit or collect personal information from children under the age of 16. If we learn that a minor has provided us with personal information, we will take immediate steps to remove such data from our databases.

12. Third-Party Links & External Integrations

Our website may contain hyperlinks to external websites, client case study assets, or third-party platforms not owned or operated by Exquisite Software. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites or services.

13. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our technological practices, legal obligations, or service offerings. Any revisions will become effective immediately upon posting to this page, with an updated "Last Updated" date at the top. We encourage you to review this policy periodically to stay informed about how we safeguard your information.

14. Contact Us

If you have any questions, comments, or concerns regarding this Privacy Policy, our data governance practices, or wish to submit a privacy request, please contact our privacy office at: