Privacy Policy

1. Data Controller

Sojisoft Ltd ("we", "us", or "our") is the data controller responsible for your personal data. We are registered in England and Wales under Company No. 15811949, VAT GB512435425.

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity data: first name, last name, username, or similar identifier.
• Contact data: email address, telephone number, and postal address.
• Account data: credentials, account preferences, and settings.
• Usage data: information about how you use our Service, including pages visited, features accessed, and actions taken.
• Technical data: IP address, browser type and version, device identifiers, operating system, and other diagnostic data.
• Communications data: records of correspondence if you contact us by email or through the Service.

3. How We Collect Your Data

We collect data through:

• Direct interactions – when you register an Account, subscribe to a plan, contact us, or use the Service.
• Automated technologies – cookies, server logs, and similar technologies as you interact with our Service.
• Third parties – analytics providers, payment processors, and identity verification services.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: processing necessary to perform our contract with you or to take steps at your request before entering into a contract.
• Legitimate interests: processing necessary for our legitimate business interests, such as improving the Service and preventing fraud, provided those interests are not overridden by your rights.
• Consent: where you have given explicit consent, for example for marketing communications.
• Legal obligation: processing necessary to comply with applicable laws and regulations.

5. How We Use Your Data

We use your personal data to:

• Provide, maintain, and improve the Service.
• Manage your Account and process payments.
• Communicate with you about your Account, updates, and support requests.
• Send you marketing communications where you have opted in (you may opt out at any time).
• Detect and prevent fraudulent or unlawful activity.
• Comply with our legal and regulatory obligations.

6. Data Sharing and Third-Party Processors

We may share your personal data with the following categories of third-party processors who act on our behalf:

• Hosting and infrastructure: Vercel, Inc. (cloud hosting and deployment).
• Analytics: we may use analytics services to understand how users interact with the Service. When specific providers are integrated, they will be named here.
• Payment processing: when subscription billing is active, we will name the payment processor here. Payment data is handled directly by the processor and is not stored on our servers.
• Communications: email service providers used to send transactional and, where you have opted in, marketing emails. Specific providers will be named here when integrated.

All third-party processors are bound by data processing agreements and are required to protect your data in accordance with UK GDPR standards. We do not sell your personal data to third parties.

7. International Data Transfers

Some of our third-party processors operate outside the UK and European Economic Area (EEA). Where we transfer personal data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO) or equivalent mechanisms.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When your Account is closed, we will delete or anonymise your personal data within a reasonable period, unless we are required by law to retain it longer.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to obtain a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restrict processing: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting prior processing.

To exercise any of these rights, please contact us at hello@sojisoft.com. We will respond within one calendar month.

10. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device by your browser. We use them to operate the Service, remember your preferences, and understand how you interact with our website.

We use the following types of cookies:

• Strictly necessary cookies: essential for the website to function (e.g. session management, security). These cannot be disabled.
• Functional cookies: remember your preferences and settings to provide a better experience.
• Analytical/performance cookies: help us understand how visitors interact with our website by collecting anonymous usage data. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our website.

For more information about cookies and how to manage them, visit aboutcookies.org.

11. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice on the Service. The date at the top of this page indicates when the policy was last revised.

13. Complaints

You have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO):

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or our data practices, please contact us: