Privacy Policy & Enterprise Security Standards

1. Information We Collect

We collect personal and technical data necessary to deliver enterprise software engineering services, manage client accounts, and operate our SaaS applications efficiently.

2. Lawful Bases & How We Use Your Data

We process personal data strictly in accordance with applicable global privacy laws, relying on clear legal bases:

• Contractual Performance: To fulfill software engineering agreements, provision user accounts, deliver core product features, and provide customer support.
• Legitimate Business Interests: To secure infrastructure, detect fraudulent activities, optimize multi-tenant cloud architecture, and enhance user experience.
• Legal & Regulatory Obligations: To comply with tax laws, financial reporting, statutory audits, and legal requests from public authorities.
• Explicit Consent: To send promotional updates, technical newsletters, or product announcements when you have explicitly opted in. You may withdraw consent at any time.

3. Enterprise Compliance Frameworks (GDPR, HIPAA, SOC 2)

Vineforce builds security and compliance into every layer of our application lifecycle, supporting clients with rigorous regulatory mandates:

4. Data Hosting, Encryption & Self-Hosted Options

Data security is enforced using industry-standard cryptographic protocols and resilient infrastructure:

• Encryption Standards: All data in transit is protected using TLS 1.3 protocols. Data at rest is encrypted using AES-256 standards across databases and storage volumes.
• Cloud Infrastructure: Cloud applications are hosted in enterprise-grade Microsoft Azure datacenter environments featuring multi-region redundancy and physical security controls.
• Self-Hosted & Private Cloud Deployments: For enterprise organizations with strict data sovereignty requirements, Vineforce provides self-hosted and private cloud deployment models, keeping all sensitive records within the client's internal network perimeter.

5. Third-Party Disclosures & Sub-Processors

We do not sell, rent, or trade your personal data to third parties. We share information only with trusted service providers who act as sub-processors to assist in operating our platform:

• Infrastructure & Hosting Providers: Cloud hosting partners (e.g., Microsoft Azure) bound by strict confidentiality and data protection agreements.
• Payment Processors: Merchant processors handling subscription billing under PCI-DSS compliance standards.
• Legal & Regulatory Disclosures: We may disclose information if required by law, subpoena, or court order, or to protect the rights, property, and safety of Vineforce, our users, or the public.

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to ensure secure authentication, remember user preferences, and analyze aggregate traffic patterns.

You can modify your browser settings to block or delete cookies. However, disabling essential cookies may impact specific functional features of our web applications.

7. Data Retention & Your Privacy Rights

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or satisfy legal and statutory requirements. You maintain full rights regarding your data: