Enterprise Privacy Policy

1. Overview and Scope

Paradespalpatch Technologies Ltd. (referred to as "Paradespalpatch", "we", "us", or "our") provides autonomous enterprise AI orchestration software and advisory solutions on paradespalpatch.yachts. We recognize that our enterprise clients and website visitors place profound trust in our security and data handling architecture. This Privacy Policy outlines the categories of data we collect, the rigorous technical boundaries governing processing, our third-party processing integrations, and your statutory rights under the General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA/CPRA).

2. Data Collection Principles

We adhere strictly to the principle of data minimization. We collect only personal data necessary to establish enterprise client communications, deliver licensed platform functionality, and secure our network infrastructure:

• Directly Provided Information: When you submit an integration inquiry via our contact form, we collect your full name, work email address, company affiliation, selected architecture focus, and technical scope notes.
• Technical & Telemetry Data: During website navigation, our servers automatically record Internet Protocol (IP) addresses, browser user agent strings, referral URLs, operating system metadata, and timestamped page requests for security monitoring and load balancing.
• Customer Operational Data: Under formal Master Services Agreements (MSAs), client data grounded in Google Gemini Enterprise remains strictly within the client's isolated Virtual Private Cloud (VPC) tenant. We do not store, index, or train foundation models on proprietary corporate data inputs.

3. Zero Foundation Model Training Guarantee

In accordance with Google Cloud enterprise service terms and Paradespalpatch operational governance, no customer prompts, API payloads, vector embeddings, multimodal images, or generated workflow outputs are ever utilized to train, retrain, or improve foundational machine learning models. Tenant boundary isolation ensures complete cryptographic separation between client environments.

4. Third-Party Sub-Processors

To maintain scalable, low-latency, and high-availability enterprise services, Paradespalpatch engages vetted third-party sub-processors under strict Data Processing Addenda (DPAs):

• Google Cloud Platform (Vertex AI / Gemini Enterprise): Foundation model inference, managed vector search, and Virtual Private Cloud infrastructure located within regional EU and US data centers.
• Cloudflare Inc.: Distributed Denial of Service (DDoS) mitigation, Web Application Firewall (WAF) routing, and Edge SSL/TLS certificate termination.
• Transactional Messaging Providers: Enterprise mail servers utilized strictly for replying to validated contact inquiries and system status alerts.

5. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess clear statutory rights regarding your personal information:

• Right of Access & Portability: You may request a machine-readable copy of any personal data we hold concerning your identity.
• Right to Rectification: You may instruct us to correct inaccurate or incomplete operational records.
• Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your contact records, provided retention is not required by statutory tax or corporate accounting laws.
• Right to Restriction and Objection: You may object to data processing grounded in legitimate interests or request temporary processing freezes.
• Non-Discrimination: We will never deny services, vary pricing tiers, or degrade quality if you choose to exercise your statutory privacy rights.

6. Data Retention and Destruction

Contact inquiry data is retained in secure CRM repositories for twenty-four (24) months following the last active communication before automated archival and cryptographic erasure. Server access logs are retained on an automated rolling cycle for ninety (90) days to support threat hunting and incident forensics before automated purging.

7. Data Protection Officer (DPO) Contact

To submit formal data access requests, invoke GDPR/CCPA rights, or ask technical questions regarding our data architecture, contact our Data Protection Officer directly: