LOGICFOCUS TECHNOLOGY SOLUTIONS

1. Introduction and Scope

This Enterprise Privacy Policy ("Policy") governs how Logicfocus collects, processes, manages, stores, and safeguards personal and operational data across the cloud SaaS enterprise platform, related mobile applications, administrative web consoles, customer support portals, and official corporate websites. It applies to all subscribed customer organizations, authorized corporate users, administrators, field service representatives, and visitors accessing our platform ecosystems.

2. Data Controller vs. Data Processor Roles

Under applicable global data protection frameworks—including the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the General Data Protection Regulation (GDPR, EU/UK), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA):

• Customer as Data Controller / Data Fiduciary: The Customer acts as the Data Controller / Data Fiduciary regarding all customer records, business contact directories, employee accounts, and transaction data entered into the platform, maintaining sole authority over the lawful grounds for collecting and processing such data.
• Logicfocus as Data Processor: Logicfocus functions strictly as a Data Processor, processing Customer Data solely on behalf of and pursuant to the explicit documented instructions of the Customer to deliver the contracted SaaS operations.

3. Information We Collect

Logicfocus processes distinct categories of information necessary to deliver enterprise SaaS services:

• User Account & Identity Data: Full corporate names, business email addresses, direct telephone numbers, job designations, administrative role authorizations, and cryptographically hashed authentication credentials.
• Field Service & Geolocation Data: Precision GPS latitude/longitude coordinates, customer site visit check-in and check-out timestamps, transit route mapping logs, and remote field attendance verifications captured via mobile applications.
• Commercial CPQ & Transactional Metadata: Customer pricing matrices, dynamic Bill of Materials (BOM) configurations, discount approval logs, localized tax registration identifiers, dynamic quotes, and generated Order Processing documents.
• ERP, AMC & Technical Service Records: Asset serial numbers, warranty terms, Annual Maintenance Contract (AMC) renewal schedules, field diagnostic logs, spare parts inventory movements, and support resolution tickets.
• Technical Device & Usage Telemetry: IP addresses, browser specifications, operating system versions, login access timestamps, and UI interaction telemetry collected to ensure system health and security.

4. Cookies and Tracking Technologies

The platform utilizes functional, security, and operational cookies and local storage tokens strictly required to sustain authenticated SaaS sessions. These include:

• Essential Session Tokens: Secure, encrypted authentication cookies required to identify active user sessions, enforce role-based permissions, and prevent Cross-Site Request Forgery (CSRF).
• Platform Performance & Diagnostic Cookies: Operational telemetry used to monitor load distribution, server latency, and error states.
• Zero Third-Party Advertising Trackers: Logicfocus does NOT deploy third-party advertising cookies, behavioural retargeting pixels, or commercial tracking networks within the authenticated SaaS platform.

5. Legal Bases for Processing

Where Logicfocus processes personal data, it relies on recognized statutory legal bases:

• Contractual Performance: Necessary to provide, maintain, and support the cloud SaaS modules under the commercial agreement with the Customer.
• Compliance with Legal Obligations: Necessary to fulfill accounting standards, statutory audits, tax requirements, and lawful judicial or regulatory warrants.
• Legitimate Business Interests: Necessary to protect infrastructure security, detect multi-tenant intrusions, enforce acceptable use policies, and ensure service reliability.
• Explicit Consent: Where applicable for optional communications or specialized features, processed based on affirmative customer consent.

6. How We Use Your Information (Purposes of Processing)

Customer data is processed exclusively for explicit operational purposes, including:

• Calculating dynamic quotation pricing, cross-currency rates, and margin compliance in real-time.
• Dispatching preventive maintenance schedules and calculating optimal field technician route navigation.
• Updating gamification sales leaderboards, quota visualizers, and automated deal celebration broadcasts.
• Synchronizing inventory ledgers, material decrements, and billing records with third-party ERP platforms.
• Delivering SLA-backed technical assistance, troubleshooting incident reports, and deploying security hotfixes.

7. Artificial Intelligence and Machine Learning Practices

Logicfocus enforces strict ethical and data-isolation boundaries regarding AI and automated algorithmic processing:

• No Public Model Training: Customer Data, proprietary pricing formulas, commercial BOM configurations, and personal records are NEVER ingested, shared, or utilized to train public, generalized, or third-party Artificial Intelligence/Large Language Models.
• Tenant-Isolated Algorithmic Operations: Any automated algorithmic calculations (such as dynamic pricing matrices or predictive maintenance triggers) execute strictly within the Customer's isolated tenant scoping and are never shared across tenants.

8. Information Sharing, Disclosure, and Sub-processors

Logicfocus maintains a strict zero-monetization policy: We NEVER sell, rent, commercialize, or disclose Customer Data to third parties.

• Authorized Sub-processors: We share data solely with enterprise sub-processors strictly required for cloud infrastructure hosting, high-reliability transactional email/SMS gateways, and system monitoring. Every sub-processor is vetted under comprehensive Data Processing Addendums (DPAs) requiring adherence to rigorous security standards (SOC 2, ISO 27001).
• Statutory & Judicial Disclosures: We disclose Customer Data only when required by binding law, court summons, or valid governmental subpoena, providing prompt written notice to Customer where legally permitted.

9. International Data Transfers

Platform infrastructure is primarily hosted within enterprise cloud data center availability zones situated in India. Where cross-border data routing or support access occurs (such as for multi-national corporate users):

• Transfers are governed by adequate legal safeguards, including Standard Contractual Clauses (SCCs) approved by competent data protection authorities and statutory cross-border compliance provisions under the DPDP Act 2023.
• Data is subject to equivalent cryptographic protection and organizational controls regardless of geographical transit.

10. Data Retention and Deletion Schedules

(a) Active Subscription Retention: Customer Data is retained throughout the active term of the commercial subscription to ensure seamless continuity of business records, quotations, and service histories.

(b) Post-Termination Export Window: Following subscription expiration or termination, Logicfocus maintains the Customer's tenant instance in a secured, read-only status for thirty (30) calendar days to facilitate final data export.

(c) Cryptographic Sanitization: Upon conclusion of the 30-day transition window, all Customer Data and associated backups are permanently and cryptographically purged from production clusters in accordance with industry-standard media sanitization standards (NIST SP 800-88).

11. Data Security and Technical Safeguards

Logicfocus maintains defense-in-depth technical and organizational safeguards:

• Logical Multi-Tenant Isolation: Multi-tenancy is enforced via strict logical isolation, database tenant scoping, and authorization barriers within isolated Virtual Private Clouds (VPC).
• Comprehensive Cryptography: All network traffic in transit is encrypted using modern cryptographic protocols (TLS 1.3). All disk volumes, block stores, and backups are encrypted at rest using enterprise-grade encryption (AES-256).
• Credential Protection: Passwords and sensitive authentication tokens are protected using salted cryptographic hashing algorithms.
• Migration Governance: Database schema modifications and system updates are deployed strictly using automated conditional migration scripts with atomic validation and rollback capabilities to prevent data corruption.
• Backup & Business Continuity: Automated point-in-time recovery (PITR) and daily geo-redundant snapshots are maintained across separated availability zones.

12. Your Privacy Rights and Choices (DPDP, GDPR, CCPA/CPRA)

In alignment with global privacy frameworks, individual Data Subjects (through their authorized corporate administrator) are entitled to exercise the following rights:

• Right to Access & Confirmation: The right to verify whether personal data is being processed and obtain a portable copy thereof.
• Right to Rectification & Correction: The right to correct inaccurate, outdated, or incomplete personal records.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of personal information where statutory retention grounds no longer apply.
• Right to Data Portability: The right to export data in standard, machine-readable structured formats.
• Right to Restrict or Object to Processing: The right to object to or restrict processing under defined statutory circumstances.

To exercise these rights, corporate administrators may submit requests to sales@logicfocus.net, which will be addressed within statutory deadlines.

13. Children’s Privacy

The platform is exclusively a business-to-business (B2B) enterprise productivity suite designed solely for commercial enterprise operations. It is not directed to, marketed toward, or intended for use by minors or individuals under eighteen (18) years of age. Logicfocus does not knowingly collect, solicit, or store personal data from minors. If Logicfocus discovers that an unauthorized minor’s data has been registered, it shall be deleted immediately.

14. Third-Party Integrations and External Links

The platform may facilitate bi-directional API connections with third-party enterprise resource planning, financial, or CRM systems configured by the Customer. Logicfocus does not control and is not liable for the privacy practices, authentication mechanisms, or data policies of such external third-party software. Customers are encouraged to review the respective privacy terms of any third-party software connected to the platform.

15. Changes to This Privacy Policy

Logicfocus reserves the right to periodically update or revise this Policy to reflect technical platform developments, architectural enhancements, or emerging statutory requirements. Any material changes will be communicated to Customer administrators via direct email notification or prominent platform announcements at least thirty (30) days prior to the effective revision date. Continued utilization of the SaaS platform following the revision date constitutes acceptance of the updated terms.

16. Contact Information, DPO Details, and Regulatory Complaints

For questions, privacy inquiries, data export requests, or formal regulatory complaints, parties may reach out to our designated governance desk:

• Corporate Entity: Logicfocus Technology Solutions India
• Governance Division: Data Protection & Legal Governance Office
• Direct Privacy Desk: sales@logicfocus.net
• Web Portal: www.logicfocus.net
• Seat of Governance: Tamil Nadu, India

If an individual believes that their personal data has been handled in contravention of applicable law, they maintain the right to lodge a complaint with the Data Protection Board of India or their applicable regional supervisory data protection authority.