Privacy Policy

2. Information We Collect

We only gather information directly necessary to evaluate project feasibility, deliver software engineering services, and fulfill commercial contracts:

• Contact & Identification Data: Full name, professional email address, telephone number, business or organization name, and country of operation provided via our project enquiry forms.
• Project Specifications: Functional briefs, technical diagrams, existing system descriptions, data flows, and feature wishlists submitted for architectural evaluation.
• Commercial Contract Data: Invoices, billing entities, tax identification numbers, and payment confirmations processed for milestone delivery.
• Technical Telemetry: Standard non-identifying server request logs including IP address, browser type, referring URLs, and response timestamps to ensure platform uptime and prevent automated denial-of-service abuse.

3. How We Use Your Data

We process collected data exclusively under legitimate commercial interests and contractual necessity:

• To evaluate technical feasibility, estimate sprint effort, and prepare binding project proposals.
• To communicate sprint progress, coordinate milestone deployments, and deliver ongoing maintenance.
• To generate unique enquiry reference identifiers (e.g. TPN-YYYYMM-XXXX) tracking correspondence.
• To maintain legal and financial audit records required by commercial regulatory bodies.

We strictly DO NOT sell, rent, monetize, or broker personal information or client business data to advertising brokers or marketing intermediaries under any circumstance.

4. Database & Infrastructure Security

Our technology stack is built with defensive architectural principles:

• Neon Serverless PostgreSQL: All persistent inquiry and operational records reside in isolated PostgreSQL clusters encrypted at rest via AES-256. Database access is strictly governed by least-privilege connection strings never exposed to client-side bundles.
• Encryption In Transit: All HTTP traffic is enforced over TLS 1.3 encryption with strict HTTPS redirects and HSTS headers.
• Input Validation & Sanitization: Inquiries are strictly validated using Zod schemas with stringent length bounds on the server to prevent SQL injection, cross-site scripting (XSS), or buffer overflows.
• Continuous Backups: Point-in-time recovery and snapshot replication ensure data redundancy against system failures.

5. Client NDAs & Intellectual Property Protection

As a software engineering partner to clinical hospitals, legal practices, and fintech startups, we treat all client business logic, patient protocols, trade secrets, and proprietary database architectures as strictly confidential.

We execute bilateral Non-Disclosure Agreements (NDAs) prior to deep architectural inspections. Our engineers are legally bound by strict confidentiality clauses that survive the completion of any commercial engagement.

6. Cookies & Tracking Technologies

Techpronnet operates a clean, privacy-respecting website. We do not use third-party behavioral advertising trackers, invasive profiling cookies, or cross-site fingerprinting scripts.

We use only strictly necessary session cookies required for form state handling, CSRF defense tokens, and responsive UI preferences (e.g. navigation drawer state).

7. Third-Party Service Providers

To host and deliver reliable software, we partner with premier cloud infrastructure providers:

• Neon Inc.: Serverless PostgreSQL database infrastructure and connection pooling.
• Vercel Inc.: High-performance Next.js hosting, serverless edge compute, and CDN routing.
• WhatsApp / Meta Business: Direct client communication channel when initiated by the client.

Each infrastructure partner complies with international standards including SOC 2 Type II, ISO 27001, and GDPR.

8. Data Retention & Erasure

We retain project inquiry records only for the duration required to evaluate feasibility and fulfill ongoing customer service obligations. Active client project databases and git repositories are preserved according to the terms of your commercial Statement of Work.

If an inquiry does not result in an active contract, you may request complete deletion of your records from our systems at any time.

9. Your Data Rights

Depending on your jurisdiction (including Nigeria Data Protection Act 2023, GDPR, and international privacy regimes), you have the right to:

• Access all personal data and inquiry records maintained by Techpronnet.
• Request rectification of incorrect contact or organizational records.
• Request permanent erasure of your data (“Right to be Forgotten”).
• Restrict or object to processing of your information.
• Request a portable export of your data in standard JSON or CSV format.

10. Contacting Our Privacy Team

If you have questions regarding this Privacy Policy, wish to exercise your data rights, or require an executed NDA prior to an architecture consultation, please contact our Data Protection Officer: