Who we are
This website, www.softxmind.com, is operated by Softxmind Limited(“Softxmind”, “we”, “us”), a software and AI product engineering company with offices in New York, United States and Dhaka, Bangladesh. We are the controller of the personal information described here. Questions about privacy can be sent to info@softxmind.com.
What we collect
Information you give us
- Quote requests and contact messages: your name, email, company, phone number (optional), the service, budget and timeline you select, your message, and any file you choose to attach.
- Emails and calls: what you share when you write to us or book a call.
Information collected automatically
- Security and anti-spam data:a one-way hashed version of your IP address (we don't store the address itself), your browser's user agent, and timing information, used to stop automated spam and abuse of our forms and tools.
- How you found us: the page you first landed on, the referring website and any campaign (UTM) tags, stored with your enquiry so we know which marketing works. In Europe this is only kept beyond your visit if you accept analytics cookies.
- Analytics: if you allow it, Google Analytics records pages viewed, approximate location, device and browser type. See our Cookie Policy.
- Free tools: when you use the Website Health Check, we store the website address you entered and the results, so the report link works when you share it. We don't ask for your name or email to use it.
How we use it, and our legal basis
- To respond to you and prepare proposals: steps you asked us to take before a contract, or our legitimate interest in answering business enquiries.
- To deliver services you hire us for: performance of our contract with you or your employer.
- To keep our website and forms secure: our legitimate interest in preventing fraud, spam and abuse.
- To understand and improve our website and marketing: your consent for analytics cookies (in Europe) or our legitimate interest elsewhere, which you can opt out of at any time.
- To meet legal obligations, such as tax and accounting records.
We don't sell or rent personal information, we don't share it for cross-context behavioural advertising, and we don't make automated decisions about you that have legal effects.
Who we share it with
We use a small number of trusted service providers who process data only on our instructions:
- Vercel: website hosting, file storage for attachments, and bot protection.
- Neon: our database, where enquiries and our CRM are stored.
- Resend: sending confirmation and notification emails.
- Google: Google Analytics (only with your permission where required) and PageSpeed Insights for the Website Health Check.
- Cloudflare: the “verify you are human” check on our forms, when enabled.
We may also disclose information if the law requires it, or to protect our rights, our users or the public.
International transfers
Our team works from Bangladesh and the United States, and our providers may process data in the US and other countries. Where data protection law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.
How long we keep it
- Enquiries that don't become projects: up to 3 years, then deleted or anonymised.
- Client and project records: for the length of our relationship plus the period required by tax and contract law (usually up to 7 years).
- Submissions identified as spam: deleted regularly.
- Website Health Check reports: up to 2 years.
- Analytics data: 14 months in Google Analytics.
Your rights
Depending on where you live, you can:
- ask for a copy of the personal information we hold about you;
- ask us to correct or delete it;
- object to, or ask us to restrict, how we use it;
- ask us to transfer it to you or another company in a portable format;
- withdraw consent at any time (for example with Cookie settings in the footer), without affecting earlier processing;
- opt out of any “sale” or “sharing” of personal information (we don't do either) and limit the use of sensitive information (we don't collect it).
These rights apply under the EU and UK GDPR, the California Consumer Privacy Act as amended by the CPRA and other US state privacy laws, the UAE Personal Data Protection Law, the Saudi Personal Data Protection Law and the Australian Privacy Act. To use them, email info@softxmind.com. We'll reply within 30 days (45 days where US state law allows) and won't treat you differently for using your rights. We honour Global Privacy Control browser signals as an opt-out. You may also complain to your local data protection authority.
Security
We use encryption in transit (HTTPS with HSTS), access controls and role-based permissions for our team, private storage for attachments, and automated spam and abuse protection. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
Children
Our website and services are for businesses and aren't directed at children under 16. We don't knowingly collect their information.
Changes
If we change this policy we'll update the date at the top of this page, and tell you directly about significant changes where appropriate.
Contact
Softxmind Limited
16633 89th Ave, Apt 9D, Jamaica, New York 11432, United States
14th Floor, ICT Tower, E-14/X, Dhaka 1207, Bangladesh
Email: info@softxmind.com