Privacy Policy
Effective Date: January 1, 2025
At Sarphir Technologies Inc. ("Sarphir," "we," "us," or "our"), we are committed to protecting your privacy and upholding the principles of sovereignty and data autonomy. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you access or use the Sarphir Atlas platform (the "Platform").
By using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use the Platform.
1. Data We Collect
1.1 Personal Information
We collect the following personal information when you register for or use the Platform:
- Email address (for authentication and communication)
- Full name (for account identification)
- IP address (for security and fraud prevention)
- Session data (for platform functionality and user experience optimization)
1.2 Technical Information
We automatically collect certain technical information, including:
- Device type, operating system, and browser information
- Usage data (pages visited, time spent, navigation patterns)
- Cookies and similar tracking technologies
2. Purpose of Data Collection
We collect and process your data for the following purposes:
- Authentication: To verify your identity and provide secure access to the Platform
- Platform Functionality: To deliver intelligence reports, analytics, and sovereignty data
- Analytics: To understand user behavior and improve our services
- Communication: To send you updates, alerts, and service-related notifications
- Security: To detect, prevent, and respond to fraud, abuse, or unauthorized access
- Compliance: To comply with legal obligations and regulatory requirements
3. Data Sharing
We do not sell, rent, or trade your personal information. We only share your data with:
- Essential Service Providers: Third-party vendors who assist us in operating the Platform (e.g., cloud hosting, email delivery, analytics tools) under strict confidentiality agreements
- Legal Authorities: When required by law, regulation, or legal process (e.g., court orders, subpoenas)
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity
All third-party service providers are carefully vetted and bound by data protection agreements.
4. Security Measures
We implement industry-standard security measures to protect your data:
- Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256)
- Access Control: Strict role-based access controls limit data access to authorized personnel only
- Monitoring: Continuous monitoring for suspicious activity and security threats
- Regular Audits: Periodic security assessments and vulnerability testing
Despite our best efforts, no system is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
5. Your Rights (GDPR Compliance)
If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request limitation of how we process your data
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for certain purposes
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, please contact us at privacy@sarphir.com.
6. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyze platform usage. You can manage your cookie preferences through our cookie consent banner or your browser settings.
For more information, please refer to our Cookie Policy (available upon request).
7. International Data Transfers
Your data may be transferred to and processed in jurisdictions outside your country of residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adherence to international data protection frameworks.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or sending you an email. Your continued use of the Platform after such changes constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Sarphir Technologies Inc.
Email: privacy@sarphir.com
Address: [Jurisdiction-specific address to be added]
This Privacy Policy is governed by the laws of [Jurisdiction]. By using the Platform, you consent to the exclusive jurisdiction of courts in [Jurisdiction] for any disputes arising from this policy.