Privacy Policy
1. Introduction
Welcome to M2SoftTech ("we," "our," or "us"). We operate the website located at m2softtech.com (the "Site") and any related services, products, or applications (collectively, the "Services"). We are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains what information we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to it. Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services.
This policy applies to all information collected through our Site and Services, as well as any related communications such as email, phone, or other channels where we refer to this policy.
2. Information We Collect
We collect information in several ways depending on how you interact with our Services. Below is a detailed breakdown of the categories of information we may collect.
2.1 Information You Provide Directly
When you fill out forms on our Site — such as contact forms, quote request forms, newsletter sign-up forms, or account registration forms — you voluntarily provide us with personal information. This may include:
- Identity data: your first name, last name, username, or similar identifier.
- Contact data: your email address, phone number, billing address, and delivery address.
- Business data: company name, job title, industry, and business size.
- Message content: any content you include in messages, support tickets, or feedback submissions.
- Account credentials: password and similar security information if you create an account.
- Payment data: if you make a purchase, payment information is collected and processed by our third-party payment processor. We do not store full payment card numbers on our servers.
You are not required to provide personal information to browse our Site, but certain features — such as contacting us or accessing gated content — require it.
2.2 Analytics and Usage Data
We automatically collect certain information when you visit, use, or navigate the Site. This information does not reveal your specific identity but may include device and usage information such as:
- Pages visited and time spent on each page
- Referring URLs and exit pages
- Browser type and version
- Operating system and device type
- Screen resolution and viewport size
- Clicks, scrolls, and other on-page interactions
- Geographic location at the country or city level (derived from IP address)
- Session duration and bounce rate metrics
2.3 Cookies and Tracking Technologies
We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior on our Site. For a full breakdown, see Section 4 (Cookies & Tracking) below.
2.4 Server Logs
Our web servers automatically record certain information in server log files each time you make a request to our Site. Server logs may include:
- Your IP address
- Date and time of access
- HTTP method and URL requested
- HTTP response code
- Number of bytes transferred
- User-agent string (browser and OS information)
- Referrer URL
We use server log data primarily for security monitoring, performance optimization, and diagnosing technical issues. Log files are retained for a limited period and are not used to identify individual users for marketing purposes.
2.5 Information from Third Parties
We may receive information about you from third-party sources, such as social media platforms (if you interact with us on those platforms), business partners, analytics providers, or publicly available sources. We combine this information with data we collect directly to improve our Services and communications.
3. How We Use Your Information
We use the information we collect for the following purposes, each supported by a lawful basis:
- To provide and manage our Services: Process transactions, fulfill requests, and manage your account or relationship with us.
- To respond to inquiries: Reply to contact form submissions, support requests, and other communications you initiate.
- To send marketing communications: With your consent, we may send newsletters, product updates, promotional offers, and other marketing messages. You may opt out at any time.
- To improve our Site and Services: Analyze usage patterns, conduct A/B testing, and make product decisions based on aggregated analytics data.
- To ensure security: Detect, investigate, and prevent fraudulent transactions, abuse, and other illegal activities.
- To comply with legal obligations: Meet applicable legal, regulatory, tax, and compliance requirements.
- To enforce our terms: Investigate potential violations of our Terms of Service and enforce our agreements.
- To personalize your experience: Tailor content, recommendations, and advertising to your interests and preferences.
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose. If we need to use your information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
5. Third-Party Services
We work with third-party service providers to help us operate our Site and deliver our Services. These third parties may have access to your personal information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes.
5.1 Analytics Providers
We use analytics services — such as Google Analytics — to collect and analyze usage data. These providers may use cookies and similar technologies to collect information about your use of our Site and other websites. Google Analytics data is used to understand audience behavior, improve our content, and measure marketing effectiveness. You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.
5.2 Email & Newsletter Providers
If you subscribe to our newsletter or marketing emails, your email address and related preferences are stored with a third-party email marketing platform (such as Mailchimp, ConvertKit, or similar). These providers process your data under their own privacy policies and in accordance with our data processing agreements. You may unsubscribe at any time using the link included in every email we send.
5.3 Content Delivery Networks (CDN)
We may use content delivery networks to serve static assets (images, scripts, stylesheets) faster to users around the world. CDN providers may log basic request information (IP address, user agent, requested URL) for performance and security purposes. This data is subject to the CDN provider's privacy policy.
5.4 Payment Processors
If we offer paid products or services, payment transactions are processed by third-party payment processors (such as Stripe). We do not receive or store your full credit card number. Please review your payment processor's privacy policy for details on how they handle your financial information.
5.5 Hosting & Infrastructure
Our Site and associated data are hosted on third-party cloud infrastructure. Our hosting providers maintain their own security and privacy practices and may process certain technical data as part of service delivery.
5.6 Social Media Platforms
Our Site may include social sharing buttons or embedded content (such as videos or feeds) from platforms like LinkedIn, Twitter/X, YouTube, or GitHub. These platforms may collect data about you when you interact with their embedded content, even if you do not click on them. This data collection is governed by those platforms' respective privacy policies.
6. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Contact form submissions: Retained for up to 3 years to manage ongoing business relationships and respond to follow-up inquiries.
- Email marketing data: Retained until you unsubscribe or request deletion. Suppression records may be kept indefinitely to honor opt-out requests.
- Analytics data: Typically retained in aggregate form for up to 26 months, per analytics provider default settings.
- Server logs: Retained for up to 90 days for security and diagnostic purposes, then deleted or anonymized.
- Account data: Retained for the life of your account, plus up to 2 years after account closure to comply with legal obligations.
- Financial records: Retained for up to 7 years to comply with applicable tax and accounting regulations.
When personal data is no longer required, we securely delete or anonymize it so that it can no longer be associated with you.
7. Your Rights
Depending on your location, you may have certain rights regarding your personal information. We are committed to honoring these rights in accordance with applicable law.
7.1 Rights Under GDPR (EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or UK GDPR:
- Right to access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete personal data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data, subject to certain exceptions.
- Right to restrict processing: Request that we limit how we use your data in certain circumstances.
- Right to data portability: Receive your personal data in a structured, machine-readable format.
- Right to object: Object to processing of your data for direct marketing or based on legitimate interests.
- Rights related to automated decision-making: Not to be subject to decisions made solely through automated means that significantly affect you.
To exercise these rights, please contact us at privacy@m2softtech.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.
7.2 Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with the following rights:
- Right to know: Know what categories and specific pieces of personal information we have collected about you, how it is used, and to whom it is disclosed.
- Right to delete: Request deletion of personal information we have collected, subject to certain exceptions.
- Right to correct: Request correction of inaccurate personal information.
- Right to opt out of sale or sharing: We do not sell personal information in the traditional sense. If we share personal data with third parties for cross-context behavioral advertising, you have the right to opt out.
- Right to limit use of sensitive personal information: Limit our use of sensitive personal information to necessary purposes.
- Right to non-discrimination: Not receive discriminatory treatment for exercising your CCPA rights.
To submit a CCPA request, contact us at privacy@m2softtech.com. We will respond within 45 days, with an extension of up to 90 days when reasonably necessary.
7.3 Other Jurisdictions
If you are located outside the EEA, UK, or California, you may still have privacy rights under your local laws. Please contact us and we will make reasonable efforts to accommodate applicable legal requirements.
8. Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, and destruction. Our security practices include:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of sensitive data at rest
- Access controls limiting personal data access to authorized personnel only
- Regular security assessments and vulnerability scanning
- Employee training on data privacy and security practices
- Incident response procedures for potential data breaches
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. If you believe your personal information has been compromised, please contact us immediately at privacy@m2softtech.com.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant authorities in accordance with applicable law.
9. Children's Privacy
Our Services are not directed to children under the age of 13 (or 16 in the European Economic Area), and we do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at privacy@m2softtech.com and we will take steps to delete such information from our records.
If we discover that we have inadvertently collected personal information from a child under the applicable age threshold, we will promptly delete that information. We encourage parents and guardians to monitor their children's internet use and to help enforce this policy by instructing their children never to provide personal information on our Site without parental permission.
10. International Data Transfers
We are based in the United States, and information we collect may be transferred to, stored, and processed in the United States or other countries where our service providers operate. If you are located in the EEA, UK, or another jurisdiction with data transfer restrictions, please be aware that these countries may not have the same data protection laws as your home country.
Where we transfer personal data internationally, we take appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other lawful transfer mechanisms — to ensure your information receives an adequate level of protection.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.
For material changes, we will provide a more prominent notice — such as an in-site notification or email to registered users — prior to the change taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
Your continued use of our Services after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, please discontinue your use of our Services and contact us to request deletion of your data.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:
We will respond to your inquiry as promptly as possible and within the timeframes required by applicable law. When contacting us, please provide sufficient information to allow us to identify your records and verify your identity before processing any data rights request.