Privacy Policy

1. Introduction

Critonyx ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, including:

• Name, email address, phone number, and company information
• Professional details such as job title and industry
• Project requirements and technical specifications
• Payment and billing information
• Communication preferences and feedback

Technical Information

We automatically collect certain technical information, including:

• IP address, browser type, and operating system
• Website usage data and navigation patterns
• Device information and screen resolution
• Cookies and similar tracking technologies
• Log files and server data

3. How We Use Your Information

We use collected information for the following purposes:

• Providing and improving our technology services
• Communicating about projects, updates, and support
• Processing payments and managing accounts
• Analyzing website usage and optimizing user experience
• Marketing our services and sharing relevant content
• Complying with legal obligations and protecting our rights
• Detecting and preventing fraud or security threats

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in:

• Cloud hosting and infrastructure services
• Payment processing and billing
• Email marketing and communication platforms
• Analytics and performance monitoring
• Customer support and project management tools

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Investigate potential violations of our terms
• Prevent fraud or security threats

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest using AES-256
• Multi-factor authentication for system access
• Regular security audits and penetration testing
• Employee training on data protection best practices
• Compliance with industry standards (SOC 2, ISO 27001)
• Incident response procedures and breach notification protocols

6. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Active client data: Duration of engagement plus 7 years
• Marketing communications: Until you unsubscribe
• Website analytics: 26 months maximum
• Financial records: 7 years for tax and audit purposes
• Legal compliance data: As required by applicable laws

7. Your Privacy Rights

Depending on your location, you may have the following rights:

General Rights

• Access: Request copies of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to processing of your personal information

California Residents (CCPA)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

8. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Provide personalized content and advertisements
• Improve website functionality and performance

You can control cookies through your browser settings. However, disabling cookies may affect website functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for data transfers
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Email notification to registered users
• Prominent notice on our website
• Updates to the "Last updated" date at the top of this policy

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

13. Compliance Certifications

Critonyx maintains the following privacy and security certifications:

• SOC 2 Type II Compliance
• ISO 27001 Information Security Management
• GDPR Compliance for European clients
• HIPAA Compliance for healthcare clients
• CCPA Compliance for California residents