1. Overview & Commitment to Privacy

At Raydrim (“Raydrim”, “we”, “us”, or “our”), accessible from https://raydrim.com, we take the confidentiality, privacy, and security of our clients, website visitors, and partners with the utmost seriousness.

This Privacy Policy outlines the types of personal data and technical information we collect, how it is processed and protected, and your statutory rights under the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and applicable international privacy frameworks.

2. Information We Collect

We collect information directly from you when you interact with our website, request a proposal, execute a development agreement, or use our digital platforms:

• Personal Identity Data: Name, professional email address, company name, phone number, and physical billing address submitted via contact forms or project onboarding.
• Technical & Usage Data: IP addresses, browser types, operating system specs, referring URLs, device identifiers, and page visit duration collected automatically via server logs.
• Project & Credentials Data: API access tokens, repository access keys, and cloud infrastructure credentials provided voluntarily for software development and deployment services.

3. Legal Basis & How We Use Your Data

Raydrim processes personal data exclusively under legitimate legal bases, including contractual necessity, explicit consent, legal compliance, and legitimate business interest:

• Contractual Performance: Fulfilling SOW deliverables, processing milestone payments, and managing client accounts.
• Platform Communications: Sending technical project updates, security advisories, and administrative notices.
• Service Improvement: Analyzing website navigation patterns to optimize user experience and platform responsiveness.

4. Cookies & Analytics Policy

We use strictly necessary functional cookies and privacy-focused analytics to ensure optimal web functionality.

5. Client Confidentiality & Source Code Security

All project assets, client source code, database dumps, brand strategy documents, and internal credentials shared with Raydrim during an active engagement are treated as Strictly Confidential. Staff and contractors adhere to binding non-disclosure agreements (NDAs).

6. Third-Party Infrastructure Providers

To deliver enterprise-grade performance, we utilize vetted global infrastructure partners operating under strict Data Processing Agreements (DPAs):

• Cloud Hosting & Edge Compute: Amazon Web Services (AWS), Vercel (Edge Network).
• Payment Gateways: Stripe, Payoneer, Wise (PCI-DSS Level 1 compliant).
• Developer Tools: GitHub Enterprise, Vercel Analytics, Postmark (transactional email).

7. Security Standards & Retention

We implement industry-standard technical and organizational security measures, including AES-256 encryption at rest, TLS 1.3 encryption in transit, strict role-based access control (RBAC), multi-factor authentication (MFA), and routine vulnerability audits.

8. Your Statutory Rights (GDPR & CCPA)

Depending on your location, you hold statutory data protection rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where no legal override exists.
• Right to Restrict / Opt-Out: Opt out of marketing communications or restrict processing.

9. International Data Transfers

Raydrim operates globally. Personal data collected may be transferred to and processed in secure data centers located in the United States and European Economic Area (EEA). All cross-border transfers comply with Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Contact Data Protection Officer

For privacy requests, GDPR data access requests, or privacy inquiries, please contact our Data Protection Officer at: