Corporate Privacy Policy & Data Governance

This Corporate Privacy Policy applies to all services, proprietary enterprise software suites (including iCanERP, iCanLogistics Pro, iCanElevator AMC, and iCanHospitality), websites, APIs, and cloud infrastructures operated by iCanSoft India ("iCanSoft", "we", "us", or "our"), with registered corporate software engineering headquarters located in Pune, Maharashtra, India.

When you access our portals, commission custom software architectures, or enter into Master Services Agreements, iCanSoft serves as the Data Controller responsible for the stewardship of your organizational contact and operational information in strict compliance with applicable data protection legislation.

Depending on your engagement with iCanSoft, we process the following categories of information:

• Direct Inquiry Information: Full name, professional business email address, telephone contact number, corporate designation, organization name, and technical project requirements submitted through our interactive consultation forms.
• Client Enterprise Operational Data: Database records, shipment bills, tariff records, inventory ledgers, and trade documentation processed on behalf of clients under explicit enterprise service contracts.
• Technical Diagnostic Telemetry: Anonymized server uptime metrics, API latency response times, browser version headers, and IP addresses captured for network load balancing and automated cyber threat prevention.

We process personal and organizational data strictly under recognized lawful grounds under EU GDPR (Article 6) and the Indian Digital Personal Data Protection Act:

• Contractual Performance: To engineer, deploy, host, maintain, and support commissioned software solutions, and to fulfill agreed contractual Service Level Agreements (SLAs).
• Legitimate Business Interests: To respond promptly to enterprise consultation requests, conduct infrastructure capacity planning, and defend corporate networks against distributed denial-of-service (DDoS) attempts.
• Legal & Regulatory Obligations: To satisfy corporate statutory accounting records, tax audit disclosures, and customs regulatory compliance under government frameworks such as ICEGATE.

iCanSoft maintains a strictly privacy-preserving web architecture. We do not participate in behavioral ad retargeting networks, cross-app tracking, or data-broker syndication.

Essential first-party cookies are utilized exclusively to maintain authenticated administrative sessions, remember user interface language preferences, and balance server traffic loads across redundant cloud clusters. Users retain the complete technical freedom to block or clear cookies via their web browser settings at any moment without forfeiting access to our public information.

iCanSoft enforces technical and organizational safeguards structured around ISO/IEC 27001 guidelines and SOC 2 Type II controls:

• Cryptographic Protocols: Mandatory Transport Layer Security (TLS 1.3) with perfect forward secrecy across all public and internal service meshes. Persistent datastores are encrypted with AES-256 with automated key rotation.
• Tenant Database Partitioning: Enterprise clients operate in cryptographically isolated virtual private clouds (VPCs) with strict multi-tenant logical partitioning to prevent cross-tenant data bleed.
• Continuous Vulnerability Auditing: Automated static code analysis (SAST), weekly container image vulnerability scanning, and routine penetration testing by accredited external security auditors.

Under international data protection frameworks, authorized individuals and enterprise stakeholders retain comprehensive rights:

• Right of Access: Request a comprehensive export of personal records maintained by iCanSoft in an interoperable, machine-readable format.
• Right to Rectification: Require immediate correction of incomplete or outdated corporate profile information.
• Right to Erasure ("Right to Be Forgotten"): Demand the permanent cryptographic deletion of personal records where ongoing retention is no longer legally mandated.
• Right to Restrict or Object: Restrict processing under specific operational circumstances or lodge inquiries with statutory supervisory authorities.

Corporate inquiry records are retained for a maximum of twenty-four (24) months to facilitate continuous client communication. Operational transaction logs under active SLA contracts are preserved for the contractual duration agreed in client Statements of Work.

Upon contractual completion or explicit termination, client databases are fully exported to the client's designated storage repository within fifteen (15) business days, after which all temporary staging environments and backups are permanently purged in compliance with NIST SP 800-88 electronic media sanitization standards.

iCanSoft engages only tier-1 certified hyperscale infrastructure partners (such as Amazon Web Services and Google Cloud Platform) adhering to SOC 2 Type II, ISO 27001, and HIPAA compliance safeguards. All sub-processors are bound by strict Data Processing Agreements (DPAs).