// DATA_PROTECTION // PRIVACY_v2026.1

Corporate Privacy Policy

EFFECTIVE DATE: JANUARY 21, 2020 • LAST REVISED: JANUARY 2026 • JURISDICTION: STATE OF WYOMING, USA

1. GENERAL DISCLOSURE & SCOPE

surething LLC, operating under the commercial brand surething ("Company", "we", "us", or "our"), respects the privacy of corporate visitors, enterprise clients, and technical partners. This Privacy Policy outlines our standards for collecting, processing, securing, and storing personal and corporate data gathered through our website (surething.dev) and during client engineering engagements.

2. INFORMATION WE COLLECT

  • Direct Contact Data: When you submit an architectural inquiry or request an SOW, we collect your name, corporate email address, corporate entity name, and project technical parameters.
  • B2B Financial Data: Invoicing information, tax identification numbers (EIN / VAT), billing contact details, and banking settlement identifiers required for ACH/wire transaction processing. (Note: credit card transactions are processed securely through Level-1 PCI-DSS compliant third-party processors such as Stripe).
  • Technical Logging: Edge server access logs, IP addresses, browser user-agent headers, and request timestamps strictly utilized for operational diagnostics, DDoS prevention, and rate-limiting security.

3. PURPOSES OF DATA PROCESSING

We utilize the data we collect solely for legitimate commercial operations:

  • Scoping, delivering, and maintaining custom software systems and engineering services.
  • Fulfilling legal, statutory, and corporate accounting requirements.
  • Detecting, preventing, and mitigating cyberattacks, unauthorized system access, or fraudulent transactions.
  • Facilitating verified engineering operations and sprint deliverables.

4. ZERO SALE OF PERSONAL DATA

surething LLC does NOT sell, rent, monetize, or trade client personal or corporate information to third-party data brokers, marketers, or advertisers under any circumstances.

5. DATA RETENTION & SECURITY PROTOCOLS

We apply enterprise-grade cryptographic controls, including TLS 1.3 encryption for data in transit and AES-256 for data at rest. Access to production environments and client source repositories is governed by strict zero-trust principles, multi-factor authentication (MFA), and role-based access control (RBAC).

Client project data is retained for the duration of the commercial engagement and retained thereafter solely as necessary to comply with legal, tax, and audit obligations under Wyoming and US federal law.

6. GDPR & CCPA COMPLIANCE RIGHTS

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal data held in our systems. To exercise any data protection rights, please contact our privacy compliance desk at [email protected].

7. CONTACT & DATA CONTROLLER

Privacy & Data Protection Desk // surething
Sheridan, Wyoming, USA
Email: [email protected]