Privacy Notice

Effective date: July 26, 2026

1. Scope of this notice

This notice describes how SoftFinity Corp ("SoftFinity", "we", "us") handles personal information collected through www.softfinity.com and through ordinary business correspondence that begins there.

It does not apply to:

• Data we process on behalf of a client under a services agreement. In that role we act on the client's instructions, and the client's own privacy notice and our contract with them govern.
• Protected health information, which is addressed separately in section 6.
• Third-party websites we link to. Those operate under their own policies.

2. Personal information we collect

We collect two things: what you choose to send us, and the technical information a web server necessarily records.

We do not ask for, and the contact form has no field for, government identifiers, financial account details, precise geolocation, biometric data, or health information. Please do not send those through this website.

3. Cookies and tracking technologies

We use one cookie, and only on the contact page:

We do not use advertising cookies, analytics or measurement scripts, session-replay tools, web beacons, tag managers, or social media pixels on this site.

Third-party requests

Our pages load the Fira Sans typeface from Google Fonts. Your browser therefore makes a request to fonts.googleapis.com and fonts.gstatic.com, which discloses your IP address and user agent to Google under Google's own policies. We receive no data from those requests. If you prefer to avoid them, blocking those hosts affects only the typeface, not the content.

We do not respond to browser "Do Not Track" signals, because we do not perform the kind of cross-site tracking those signals are meant to limit.

4. How we use personal information

We use what we collect to:

• Read and reply to your enquiry, and continue the resulting correspondence.
• Provide, and give you information about, our services.
• Operate, secure, and troubleshoot the website, including detecting and blocking automated abuse and spam submissions.
• Keep records of business enquiries, and comply with legal, tax, and accounting obligations.
• Establish, exercise, or defend legal claims.

We do not use your information for automated decision-making that produces legal or similarly significant effects, and we do not use contact-form submissions to train machine-learning models.

5. How we share personal information

We do not sell personal information and we do not share it for cross-context behavioural advertising. We disclose it only as follows:

• Service providers. Our web hosting and email providers process this data so the site and our mail can function. They act on our instructions and are not permitted to use it for their own purposes.
• Professional advisers. Our lawyers, accountants, and auditors, where they need it and are bound by confidentiality.
• Legal requirements. Where required by law, subpoena, or other legal process, or where we reasonably believe disclosure is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud or a security incident.
• Corporate transactions. If SoftFinity is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this notice.

6. Protected health information

SoftFinity encounters PHI only when performing services for a client. In that context:

• We act as a business associate under the Health Insurance Portability and Accountability Act, as amended by the HITECH Act, and we execute a business associate agreement before any PHI is accessed.
• Our access to source systems, including electronic health record systems, is read-only. We do not write to, alter, or delete records in a source system.
• We access the minimum information necessary for the agreed purpose, rather than replicating whole records.
• PHI is encrypted in transit and at rest, stored in tenant-isolated environments, and retained or destroyed according to the applicable business associate agreement.
• Use and disclosure of PHI is limited to what the business associate agreement and applicable law permit. It is never used for our own marketing and is never sold.

Individuals seeking access to, or amendment of, their own health records should contact the covered entity that holds them — normally the provider or facility — because that entity, not SoftFinity, controls those records and the process for handling such requests.

Nothing in this notice is a Notice of Privacy Practices under HIPAA. SoftFinity is not a covered entity.

7. Your choices

The simplest control is what you choose to send. Every field in our contact form is optional in the sense that you can decline to use the form at all and email or call us instead; if you leave required fields blank the form will not submit.

To stop receiving correspondence from us, reply asking us to stop, or contact us using the details in section 15, and we will close the thread.

8. State privacy rights

SoftFinity is based in California. Depending on where you live, you may have some or all of the following rights in respect of personal information we hold about you:

• Know and access. Ask what personal information we hold about you, where we got it, why we use it, and to whom we disclose it, and request a copy.
• Correct. Ask us to fix inaccurate personal information.
• Delete. Ask us to delete personal information, subject to exceptions where we must retain it — for example to comply with a legal obligation or to defend a legal claim.
• Opt out of sale or sharing, and of targeted advertising. We do not sell or share personal information or serve targeted advertising, so there is nothing to opt out of. See section 9.
• Limit use of sensitive personal information. We do not collect sensitive personal information through this website.
• Non-discrimination. We will not treat you differently for exercising any of these rights.
• Appeal. Where your state provides for it, you may appeal a refusal by replying to our response.

To exercise a right, contact us using the details in section 15 with enough information for us to locate your records — normally the email address you used and the approximate date. We will verify your request by replying to that address, and will respond within the period your state's law requires. You may use an authorised agent, in which case we may ask for proof of their authority.

If you are in the European Economic Area or the United Kingdom, you may also have rights to object to or restrict processing and to data portability, and to lodge a complaint with your supervisory authority. Our lawful basis for handling enquiry data is our legitimate interest in responding to you and in operating and securing our website.

9. Do not sell or share

SoftFinity does not sell personal information, and has not sold personal information, for monetary or other valuable consideration. We do not share personal information for cross-context behavioural advertising, and we do not disclose personal information to advertising networks or data brokers. Because there is no such activity, we do not provide a "Do Not Sell or Share My Personal Information" mechanism; there is nothing for it to switch off.

10. Access and retention

We keep business enquiries and the correspondence arising from them for as long as needed for the purpose described in section 4, and then for as long as our legal, tax, and accounting obligations require. Server logs are retained on our hosting provider's ordinary rotation schedule, which is currently weekly archives held for a limited period, and are not indexed against individuals.

To request access to, correction of, or deletion of your enquiry records, contact us using the details in section 15.

11. Security

We maintain administrative, technical, and physical safeguards appropriate to the limited data this website handles. For this site specifically, that includes serving all pages over HTTPS with HTTP requests redirected to HTTPS, transmitting form submissions over an encrypted connection, protecting the form with a cross-site request forgery token and an automated-submission trap, and keeping mail credentials outside the web root so they cannot be served as content.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe you have found a vulnerability in this site, or that your information has been compromised, please tell us at the address in section 15 and we will investigate.

12. Children's privacy

This website is intended for business use by adults. It is not directed to children, we do not knowingly collect personal information from anyone under 16, and it should not be used by anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

13. International transfers

SoftFinity operates in the United States, and this website and its supporting mail systems are hosted in the United States. If you contact us from outside the United States, the information you send will be transferred to and processed in the United States, where data protection law differs from that in your own country. Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on an appropriate transfer mechanism such as the European Commission's standard contractual clauses.

14. Changes to this notice

We may update this notice as our practices or the law change. We will revise the effective date at the top of the page, and changes apply going forward from that date rather than retroactively. Where a change is material we will make it more prominent than a date change alone. Please review this page periodically.

15. How to contact us

For any privacy question, or to exercise a right described in section 8: