1. Data Controller Identity & Scope

This Privacy Statement governs the processing operations conducted by Software Prince LLC (trading as "Software Prince," "we," "us," or "our"), a limited liability company organized and operating under the laws of the United States.

This single, unified document applies to all digital interfaces, APIs, public repositories, and client service portals hosted on or resolving to softwareprince.com and associated sub-interfaces (collectively, the "Platform" or "Services"). We maintain this single canonical location (https://softwareprince.com/privacy-policy) to ensure our privacy and operational standards remain directly accessible and machine-verifiable.

---

2. Categories of Technical & Diagnostic Identifiers We Process

We collect technical and diagnostic identifiers—including network configuration, rendering signatures, and interaction depth—specifically to protect platform integrity and optimize delivery.

When you connect to our Services, our server and client-side architecture programmatically interfaces with defined technical metrics categorized as follows:

• Network Configuration & Provenance Identifiers: Internet Protocol (IP) interfaces, Autonomous System Numbers (ASN), reverse lookup attributes, network transit signatures, connection provenance classifications (such as residential ISP, mobile network, proxy node, virtual private network [VPN], or automated cloud/datacenter IP ranges), and coarse geographic locality (country, state/region, and municipal locality).
• Rendering Signatures & Terminal Environment Posture: Display geometry (active viewport width/height, physical screen resolution, device pixel ratio [DPR], color depth, dynamic range/gamut), hardware execution concurrency (logical CPU cores, execution architecture), graphical rendering capabilities (WebGL and WebGPU unmasked adapter information and driver backend), operating environment hints, touch support metrics, and technical diagnostic verification hashes (e.g., 2D canvas and offline audio pipeline rendering signatures) used to verify that connections originate from authentic browsing environments rather than headless attack harnesses or automated scrapers.
• Interaction Depth & Session Diagnostics: Session duration, cumulative active viewport dwell times, section scroll depth percentages, public interface event coordinates (clicks and tap sequences), visibility transitions (window focus/blur intervals), and referral sources to optimize layout presentation and determine platform responsiveness.
• Direct Voluntary Submissions: Information voluntarily provided through contact forms, technical brief submissions, or project intake workflows, including professional name, email address, telephone contact, enterprise name, project specifications, and commercial correspondence.

---

3. Legal Bases & Operational Rationales

Under the General Data Protection Regulation (GDPR Article 6), the California Consumer Privacy Act (CCPA/CPRA), and related global privacy standards, we process your information exclusively under defined lawful grounds:

• Legitimate Interests (GDPR Art. 6(1)(f)): Protecting platform perimeter integrity, evaluating non-human or automated scrape patterns, preventing distributed denial-of-service (DDoS) exploitation, mitigating malicious vulnerability scans, ensuring runtime interface compatibility across diverse browser hardware, and maintaining forensic system stability.
• Contractual & Pre-Contractual Execution (GDPR Art. 6(1)(b)): Reviewing client project inquiries, preparing technical proposals, scheduling consultation calls, and administering software engineering service agreements.
• Legal Compliance (GDPR Art. 6(1)(c)): Fulfilling statutory accounting, tax, regulatory reporting, and legal discovery obligations under applicable laws of the United States and international jurisdictions.

---

4. Storage Technologies, Session State & Cookies

We believe in minimal, purposeful client storage. Our platform does not employ third-party advertising cookies, ad retargeting pixels, or cross-site tracking networks.

Our platform uses only strictly necessary first-party mechanisms—such as ephemeral session tokens, HTTP state headers, and HTML5 local storage—to support core functionality:

• Maintaining user session continuity and security across stateful workflows;
• Protecting web forms from automated CSRF spam and credential stuffing;
• Retaining user interface preferences (such as progressive web app install states).

Because these mechanisms are strictly necessary to deliver the requested service and safeguard system security, they do not require prior opt-in consent under the ePrivacy Directive and GDPR Article 5(3).

---

5. Data Sharing & Third-Party Disclosures

We do not sell, rent, license, or monetize your personal information or technical identifiers.

Disclosures of data are strictly restricted to the following operational boundaries:

• Essential Infrastructure Sub-Processors: High-security edge delivery networks, cloud hosting providers, and transactional email infrastructure operating under strict Data Processing Agreements (DPAs) with contractual confidentiality and security commitments.
• Corporate Restructuring: In the event of a merger, acquisition, asset consolidation, or corporate restructuring, data will transfer subject to the same protective standards set forth in this policy.
• Compelled Legal Disclosures: We will disclose data only when legally required by a valid court order, subpoena, or governmental regulatory authority under applicable jurisdiction.

---

6. Retention & Data Security Safeguards

We implement defense-in-depth technical safeguards—including TLS 1.3 encryption in transit, least-privilege administrative access controls, and rate-limiting defenses—to protect all processed data.

Retention Periods:

• Security & Bot Defense Telemetry: Retained ephemerally on rolling operational cycles. Once diagnostic triage and threat defense evaluations are completed, technical logs are pseudonymized, aggregated, or expunged.
• Commercial Communications & Project Inquiries: Retained for the duration of the prospective or active business engagement and in accordance with statutory corporate record retention mandates.

---

7. Your Privacy Rights & How to Exercise Them

Depending on your geographic location and applicable statutory laws (including EU/UK GDPR, California CCPA/CPRA, and related global regulations), you may exercise the following rights:

• Right to Know & Access: Request confirmation of whether we process your personal data and obtain a copy of the specific information processed.
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete personal information.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data where retention is no longer necessary for legitimate security or legal requirements.
• Right to Restriction & Objection: Object to processing carried out under legitimate interests or request processing restrictions.
• Right to Non-Discrimination: We will never deny services, alter quality, or charge different prices for exercising statutory privacy rights.

To exercise any of these rights, submit your request directly to our designated privacy desk:

---

8. Single Unified URL & Policy Updates

We maintain this policy on a single canonical URL (https://softwareprince.com/privacy-policy). Any technical or legal modifications will be published directly to this page with an updated revision date. Your continued access to our Services following the posting of modifications constitutes acknowledgment of our updated operational parameters.