1. Data Controller
SORNOX LLC (“SORNOX”, “we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard personal data when you visit sornox.com or use our web applications, IT services, and customer management software.
2. Information We Collect
We collect information necessary to provide and maintain our services:
- Account Information: Name, email address, password, company name, and contact details provided upon registration.
- Billing Details: Payment and transaction details processed securely via our PCI-DSS compliant payment processor (Stripe). We do not store raw credit card numbers on our servers.
- Customer & CRM Data: Contact lists, customer inquiries, appointment records, and notes you store in your workspace to manage your business operations.
- Technical & Log Data: IP address, browser type, operating system, device identifiers, and usage metrics collected automatically to safeguard platform security and monitor system health.
3. How We Use Your Information
We process your data for legitimate business purposes:
- To provide, operate, maintain, and enhance our web solutions and client management platform.
- To authenticate users, process payments, and issue invoices.
- To provide technical assistance and customer support.
- To protect platform integrity, prevent fraudulent activity, and enforce our Terms of Service.
- To comply with legal and regulatory obligations.
4. Data Sharing & Third-Party Sub-Processors
We do not sell, rent, or monetize your personal information. We only share data with verified third-party service providers that assist in delivering our services:
- Payment Gateways: Stripe (for PCI-compliant payment transaction processing).
- Cloud Infrastructure & Hosting: Redundant, secure cloud data centers with encrypted storage and automated backups.
- Transactional Communications: Secure email relay services for account verification and security alerts.
5. Security & Data Retention
We employ enterprise-grade security protocols to protect your personal information, including 256-bit TLS/SSL encryption for data in transit, strict tenant data isolation, and role-based access control. We retain personal data only for as long as your account remains active or as required by statutory accounting and tax retention periods.
6. Your Rights & GDPR Compliance
In accordance with GDPR and applicable data protection regulations, you hold the right to:
- Access, review, and request a copy of your personal data.
- Request the rectification of inaccurate or incomplete information.
- Request the deletion (“right to be forgotten”) of your personal data when no longer needed for lawful purposes.
- Export your data in a structured, commonly used, machine-readable format.
- Withdraw consent or object to specific processing activities at any time.
You can exercise these rights through your account management dashboard or by emailing contact@sornox.com.
7. Contact Information
If you have any questions, inquiries, or concerns regarding this Privacy Policy or our data protection practices, please contact our Data Protection team: