Privacy Policy

This Privacy Policy explains how SANFINC Inc. (“SANFINC,” “Company,” “we,” “our,” or “us”) collects, uses, and protects your personal and business information when you visit our website (sanfinc.com), procure our software development services, or interact with our support teams.

Information We Collect

To provide professional technology services, comply with federal legal standards, and ensure transaction security, we collect the following categories of information:

Identity Details

Legal full name, business or corporate name, company incorporation documents, tax identification numbers, and authorized officer government-issued ID for Know Your Customer (KYC) verification.

Contact Details

Official email address, direct telephone or mobile number, registered business address, and physical billing/shipping location.

Payment Details

Transactional payment references through verified payment channels (Stripe, Airwallex, wire transfer confirmations, and business bank transfer receipts). Note: Full payment card numbers are processed directly by certified Level 1 PCI-DSS gateways and never stored on our web servers.

Communication Records

Email correspondences, formal project milestone briefs, SMS transactional notifications, ticket inquiries, technical consultation logs, and support interactions.

How We Use Information

We process the collected data for specific, legally grounded, and service-oriented objectives:

✓
Identity & KYC Verification: Verifying client identities and legitimate business operations to prevent fraudulent transactions and comply with Anti-Money Laundering (AML) regulations.
✓
Service Execution & Delivery: Designing, engineering, provisioning, and hosting contracted digital assets, source code repositories, cloud infrastructure, and application environments.
✓
Payment & Invoicing Processing: Executing milestone billing, generating tax invoices, and processing payments securely via our integrated gateway partners.
✓
Service Communications & Updates: Sending critical milestone delivery notices, system maintenance alerts, security notices, and periodic technology insights (with an immediate opt-out option on marketing emails).

Data Retention Policy

We retain client data strictly for as long as necessary to fulfill contractual obligations, defend against claims, and comply with commercial statutory retention requirements.

5-Year Statutory Retention Window

KYC verification documents, formal signed service agreements, accounting invoices, and project sign-off records are retained for five (5) years after the business relationship formally concludes, in conformity with U.S. corporate and financial compliance standards.

Security Safeguards

We deploy industry-grade organizational and technical security measures to protect your digital assets and confidential project specifications:

End-to-End Encryption

TLS 1.3 encryption in transit and AES-256 bit encryption at rest across all data stores.

Role-Based Access

Strict least-privilege access control with mandatory Multi-Factor Authentication (MFA).

Continuous Audits

Automated vulnerability scans, dependency health checks, and log monitoring.

Client Data Rights

As our client or site visitor, you maintain full authority regarding your personal data:

Right to Access: You may request a complete export of the personal contact and identification details we hold on record.

Right to Correction & Rectification: You may update or correct inaccurate company profiles, billing addresses, or designated team contacts at any time.

Right to Deletion: You may request the deletion of non-essential records, subject to mandatory 5-year statutory financial and legal compliance obligations.

Right to Withdraw Consent: You may unsubscribe from marketing bulletins and newsletter communications at any time via the one-click unsubscribe link.

Cookies & Tracking Technologies

Our website utilizes functional cookies and standard analytics services (such as traffic performance monitoring) to maintain session integrity, understand user navigation patterns, and enhance your digital experience.

You can set your web browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Note that disabling cookies may affect certain interactive conveniences of the website.

Policy Updates & Contact

We reserve the right to periodically modify this Privacy Policy to reflect statutory changes, technological advancements, or updated commercial practices. Any revisions will be published on this page with an updated Effective Date. Continued engagement with our services constitutes acknowledgment of the revised terms.