Global Privacy Policy & Data Governance

1. Global Services & Scope of Privacy Policy

This Privacy Policy applies to all services, software solutions, and digital touchpoints provided by NUMVOX via numvox.work and associated engineering environments. As an international custom software development company and software outsourcing company, our operational scope encompasses:

• Custom Software & Web Development: Engineering enterprise web portals, SaaS platforms, and cloud-native applications for clients in North America, Europe, the Middle East, and Asia-Pacific.
• AI Software Development Services & Custom RAG Systems: Fine-tuning Large Language Models (LLMs), building autonomous AI chatbots, vector database implementations, and document processing automation.
• Mobile App Development Services: Building cross-platform React Native, Flutter, and native iOS/Android applications for international startups and brands.
• IT Staff Augmentation & Offshore Developers: Sourcing, vetting, and embedding offshore software engineers, QA testers, and AI specialists directly into client agile teams.
• Digital Marketing & SEO Engineering: Technical search engine optimization audits, growth marketing, and conversion tracking for B2B technology businesses.

2. Information We Collect

We collect personal and technical information to evaluate project requirements, provide offshore staffing, and deliver engineered software solutions.

When you complete our contact forms, schedule a strategy call, or enter into a service agreement, we collect contact details such as your full name, business email address, phone number, company name, geographic location, and specific project requirements. For IT staff augmentation candidates, we collect technical resumes, work portfolios, and professional background details.

When accessing our website, we automatically log IP addresses, browser types, operating systems, referring URLs, time spent on pages, and device parameters using standard web analytics tools like Google Analytics 4 (GA4).

During client engagements, we may process technical specs, API credentials, staging environment data, and code repositories (GitHub, GitLab, Bitbucket) strictly necessary to carry out software engineering work. We never request or store end-user passwords or credit card numbers via website inquiry forms.

3. AI Model Data Sovereignty & IP Privacy Guarantees

A core specialization of NUMVOX is providing AI software development services, building custom RAG architectures, and fine-tuning LLMs on private enterprise datasets. We maintain strict AI data protection protocols:

4. HIPAA & Healthcare Data Privacy Protocols

For healthtech clients, medical startups, and healthcare providers in the United States and abroad, NUMVOX offers HIPAA compliant software development services and document AI extraction engines:

• Business Associate Agreements (BAAs): We execute standard BAAs with US covered entities and healthcare platforms to guarantee legal compliance.
• PHI Safeguards: Protected Health Information (PHI) processed through our document AI or web platforms utilizes AES-256 encryption at rest and TLS 1.3 in transit.
• Access Controls & Audit Logging: Systems are built with role-based access control (RBAC), automatic session timeouts, and immutable audit logs to align with HIPAA Security Rule requirements.

5. International Data Transfers & Regulatory Frameworks

As a global tech firm serving clients across multiple continents, NUMVOX aligns its data protection practices with leading regional privacy statutes.

6. Why We Process Your Information

We process collected information strictly for legitimate commercial purposes, including:

• Responding to software project inquiries, preparing technical proposals, and conducting feasibility calls.
• Delivering custom web, mobile, and AI software engineering services per client master service agreements (MSAs).
• Vetting, shortlisting, and placing dedicated offshore developers through our IT staff augmentation services.
• Maintaining website performance, cybersecurity defenses, anti-fraud controls, and server uptime.
• Complying with accounting, tax, and legal obligations across operating jurisdictions.

7. Cookie Policy & Web Analytics

Cookies are small text files stored on your device. NUMVOX uses essential operational cookies to ensure site functionality, performance, and security. We may use optional analytics cookies (such as Google Analytics 4) to evaluate website traffic patterns, referral sources, and content engagement.

You can control or disable cookies at any time using your web browser settings. Disabling optional cookies will not block your access to our website or prevent you from submitting project inquiries.

8. Data Retention, Storage & Security Safeguards

We store inquiry submissions and operational project data only as long as necessary to fulfill client contracts, resolve disputes, maintain accounting records, or satisfy legal mandates.

We enforce organizational and technical security measures—including AES-256 data encryption, SSL/TLS transport layer security, strict access controls, multi-factor authentication, and regular repository security audits—to prevent unauthorized access, loss, or misuse of information.

9. Your Global Data Protection Rights

Depending on your jurisdiction (under GDPR, CCPA, PDPL, or local privacy laws), you possess the following rights regarding your personal data:

• Right to Access: Request copies of the personal information NUMVOX holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete project or personal data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your personal data where retention is no longer legally required.
• Right to Data Portability: Request transfer of your data to another organization in a machine-readable format.
• Right to Object & Restrict: Object to processing based on legitimate interests or restrict specific data processing workflows.

To submit a formal data privacy request, contact our Data Protection Team at info@numvox.work. We respond to all verified requests within 30 days.

10. Contact Details & Data Controller

If you have questions regarding this Privacy Policy, global data compliance, or custom software security protocols, please reach out to us: