Privacy Policy & Data Protection Standards

This Privacy Policy applies to personal data collected through leapsofts.com, associated subdomains, marketing landing pages, software strategy discovery sessions, customer relationship channels, and direct communications with our technical delivery pods.

Data Controller: Leapsofts Enterprise Software LLC, operating engineering hubs in Dubai, United Arab Emirates (HQ) and North America (USA). When you engage Leapsofts for bespoke custom software engineering, dedicated agile pod deployment, or cloud migrations, we serve as a Data Processor or service provider for your customer data, governed strictly by our mutual Master Services Agreement (MSA) and Data Processing Addendum (DPA).

We collect personal information directly from you, automatically through your browser interaction, and from third-party professional channels when you request technical advisory services:

• Consultation & Contact Details: When you submit a project inquiry, strategy session booking, or contact form, we collect your full name, corporate email address, telephone number, job title, company name, geographic territory, project roadmap details, and approximate investment parameters.
• Mutual Non-Disclosure Agreement (NDA) Information: Authorized corporate signatory name, corporate entity registration numbers, and legal office addresses necessary to execute binding confidentiality agreements prior to technical code reviews.
• Technical Device & Telemetry Data: IP address (anonymized at collection boundary), browser type, language settings, operating system, referring URL, time zone, and navigational telemetry across our service pages.
• Recruitment & Talent Data: Resumes, code portfolio URLs (e.g. GitHub), professional references, and employment histories submitted when applying for engineering positions within our global agile squads.

We deploy strictly necessary cookies to ensure secure session authentication, routing, and theme persistence. With your affirmative consent, we also deploy performance and analytics cookies to measure aggregated site velocity and user experience patterns.

Under Article 6 of the General Data Protection Regulation (GDPR), Leapsofts processes personal data exclusively under legitimate legal justifications:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to fulfill obligations under engineering contracts, execute statements of work (SOW), and deliver agreed-upon software milestones.
• Legitimate Interests (Art. 6(1)(f)): Processing necessary to maintain website cybersecurity, prevent distributed denial-of-service (DDoS) attacks, detect fraud, and communicate directly with enterprise prospects requesting technical advisory.
• Consent (Art. 6(1)(a)): For non-essential tracking cookies and marketing newsletters, where you have granted explicit, freely given, and revocable consent.
• Legal Obligation (Art. 6(1)(c)): Retaining financial records, tax disclosures, and anti-money laundering (AML) compliance documentation mandated by applicable corporate regulations.

We use collected information solely for professional, transparent business purposes:

• Delivering high-velocity technical scoping, architecture proposals, and MVP project timelines.
• Conducting confidential engineering review calls with Senior Technical Leads and CTO advisors.
• Maintaining continuous continuous-integration (CI/CD) pipelines, staging preview environments, and client portals.
• Protecting our digital assets against unauthorized intrusion, credential stuffing, and bot scraping.
• Complying with statutory accounting, tax reporting, and corporate governance rules.

As an enterprise custom software engineering firm, code confidentiality is fundamental to our business model. We maintain strict organizational and technical guarantees regarding proprietary client assets:

If you are a resident of the European Economic Area (EEA), United Kingdom (UK), or Switzerland, Chapter III of the GDPR grants you comprehensive data privacy rights:

• Right of Access (Art. 15): Request a complete, machine-readable copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete records.
• Right to Erasure ("Right to be Forgotten", Art. 17): Request deletion of your personal data where statutory retention grounds no longer apply.
• Right to Restriction of Processing (Art. 18): Restrict active processing while accuracy or legal disputes are investigated.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used CSV or JSON format.
• Right to Object (Art. 21): Object at any time to processing based on legitimate interests or direct marketing.

To exercise any of these rights, email our Data Protection Officer at privacy@leapsofts.com. We respond to verified requests within thirty (30) days without charge.

This section provides supplemental disclosures required by the California Consumer Privacy Act as amended by the California Privacy Rights Act (CPRA).

• Right to Know & Access: You may request the categories and specific pieces of personal information collected in the preceding 12 months.
• Right to Delete: You have the right to request deletion of personal information collected directly from you.
• Right to Correct: You have the right to request correction of inaccurate personal data.
• No Sale or Sharing of Personal Information: Leapsofts does not "sell" or "share" personal information for cross-context behavioral advertising as defined by the CCPA/CPRA, and has not done so in the preceding 12 months.
• Non-Discrimination: We will never discriminate, alter service pricing, or degrade quality if you exercise your California privacy rights.

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy or satisfy legal, audit, accounting, and security obligations:

To host our web applications and provide enterprise-grade reliability, we engage vetted third-party sub-processors adhering to stringent security benchmarks:

• Vercel Inc. (USA): Edge hosting, serverless execution, and application distribution.
• Amazon Web Services (AWS) & Microsoft Azure: Secure cloud compute, isolated database clusters, and backup storage.
• Sanity.io: Headless content management infrastructure with SOC 2 compliance.

When personal data is transferred across international borders outside the EEA or UK, we enforce the European Commission’s Standard Contractual Clauses (SCCs), UK International Data Transfer Agreements (IDTAs), and equivalent cross-border data protection safeguards.

We implement comprehensive technical and organizational safeguards engineered to protect data against unauthorized disclosure, alteration, or exfiltration:

• Cryptographic Standards: All external web traffic is enforced over TLS 1.3 encryption. Stored databases and confidential backups are encrypted with AES-256.
• Least-Privilege Access Controls: Strict role-based access control (RBAC), multi-factor authentication (MFA), and zero-trust internal perimeter access.
• Automated Vulnerability Audits: Continuous static application security testing (SAST), software dependency auditing, and regular penetration testing.
• Incident Response & Notification: In the unlikely event of a verified data breach involving personal data, we notify affected individuals and regulatory authorities within 72 hours in accordance with GDPR Article 33.

Our website and engineering services are exclusively directed to commercial enterprises, professionals, and individuals aged eighteen (18) and older. We do not knowingly collect or solicit personal data from minors under 16 years of age. If you believe a child has submitted personal data to us, contact us immediately at privacy@leapsofts.com and we will promptly delete the data from our active records.

We periodically update this Privacy Policy to reflect emerging legal regulations, evolving security frameworks, and architectural enhancements. Changes will be posted to this page with an updated "Last Updated" revision timestamp.

For privacy inquiries, Data Subject Access Requests (DSAR), or questions regarding our data protection standards, please contact our Data Protection Officer:

• Email: privacy@leapsofts.com
• Legal Team: legal@leapsofts.com
• Global HQ (Dubai): Leapsofts Enterprise Software LLC, Dubai Silicon Oasis / Business Bay, Dubai, United Arab Emirates
• Americas Hub: Leapsofts Operations, United States