Privacy Policy

GigaSphere Inc. ("GigaSphere", "we", "our", or "us") is committed to protecting the privacy and security of the personal information entrusted to us by our clients, employees, contractors, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at gigaspheresolutions.com or engage with our services.

GigaSphere serves clients across the United States, including Washington, California, and Texas.

We handle personal information in accordance with applicable United States federal and state laws. Depending on the data, activity, and statutory requirements, these may include:

• Washington — Applicable state privacy and data breach notification laws, including the My Health My Data Act where consumer health data is involved and the law applies
• California — The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), where applicable
• Texas — The Texas Data Privacy and Security Act (TDPSA), where applicable
• Applicable federal and state consumer protection, data security, and employment laws
• GDPR — General Data Protection Regulation, where applicable to individuals in the European Economic Area

Where applicable federal or state law provides additional protections, those statutory requirements govern.

3.1 Information You Provide

• Contact details (name, email, phone number) submitted through our contact forms or support ticket system
• Business or organizational information when engaging our cloud infrastructure services
• Employment-related information for employees, contractors, and consultants (governed by employment agreements and our Employee Handbook)

3.2 Information Collected Automatically

• Browser type, operating system, and device information
• IP address and approximate geographic location
• Pages visited, referring URLs, and navigation patterns
• Cookies and similar tracking technologies (see Section 8)

3.3 Information from Third Parties

• Cloud platform usage data from our managed infrastructure services (AWS, Microsoft Azure, Google Cloud)
• Background check results for employment purposes, with consent

We use the information we collect for the following purposes:

• Providing, operating, and maintaining our cloud infrastructure and consulting services
• Responding to inquiries and support requests
• Processing employment and contractor engagements
• Administering payroll, federal and state tax compliance, and group insurance benefits
• Conducting security audits and ensuring compliance with IT security policies
• Complying with legal and regulatory obligations
• Improving our website and services

GigaSphere implements robust administrative, technical, and physical safeguards to protect personal information:

• Encryption: Personal and confidential data is stored in encrypted environments designed to prevent unauthorized access and data breaches
• Access Controls: Role-based access controls limit data access to authorized personnel only
• VPN Requirement: All access to client systems and data requires use of a Virtual Private Network (VPN) with secure encrypted connections
• Password Policy: Complex passwords with alphanumeric and special characters are required and must be rotated regularly
• Approved Platforms: Company and client data is stored only on approved, vetted cloud platforms (Google Cloud, AWS, Azure) hosted in United States regions where applicable
• Network Security: Public Wi-Fi networks are prohibited for work-related activities unless secured with strong encryption
• Security Audits: Regular security audits are conducted to verify compliance with our data protection policies

In the event of a suspected or actual data breach or security incident, GigaSphere follows a strict incident response protocol:

• All personnel are required to report suspected breaches to management within 24 hours
• Affected individuals and relevant United States regulatory authorities, including state attorneys general where required, will be notified in accordance with applicable federal and state data breach notification laws, including those of Washington, California, and Texas
• Timely investigation and remediation measures will be undertaken to mitigate harm

We do not sell, rent, or trade your personal information. We may share information in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in delivering our services (e.g., cloud infrastructure providers, insurance administrators), subject to confidentiality agreements
• Legal Requirements: When required by law, regulation, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected individuals
• Consent: With your explicit consent for any other purpose not described herein

Our website may use cookies and similar technologies to enhance your browsing experience. These may include:

• Essential Cookies: Required for core website functionality
• Analytics Cookies: Help us understand how visitors interact with our site to improve performance

You may control cookie preferences through your browser settings. Disabling cookies may limit certain features of the website.

Personal information is retained only as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Employee and contractor records are retained in accordance with applicable Internal Revenue Service (IRS) requirements and federal and state employment and tax recordkeeping requirements. When information is no longer required, it is securely deleted or anonymized.

Depending on your state of residence and the law applicable to your information, you may have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Withdrawal of Consent — Withdraw your consent for the collection, use, or disclosure of your personal information, subject to legal and contractual restrictions
• Deletion — Request deletion of personal information, subject to applicable exceptions
• Portability — Obtain a portable copy of your personal information where required by law
• Opt-Out — Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling where applicable
• Appeal — Appeal a decision on a privacy request where applicable law provides that right
• Non-Discrimination — Exercise applicable privacy rights without unlawful discrimination
• Complaint — File a complaint with the relevant state attorney general, the California Privacy Protection Agency, or another competent United States authority, as applicable

For individuals in the European Economic Area, additional rights under the GDPR may apply, including the right to erasure, data portability, and restriction of processing.

Our services involve integration with third-party cloud platforms including Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). Each provider maintains its own privacy practices. We encourage you to review their respective privacy policies. GigaSphere selects and manages these platforms with applicable United States legal, contractual, and data residency requirements in mind.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

GigaSphere reserves the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our website or services after changes constitutes your acceptance of the revised policy.