Privacy and Data Protection Policy

1. Introduction and Scope

At Inversiones Logics Studio 828 C.A. (hereinafter, "The Company"), we are committed to ensuring the confidentiality, integrity, and privacy of information. This Privacy Policy governs the processing of data strictly necessary for the operation and licensing of the risk management platform RiskOS (hereinafter, "The System").

As a controlled deployment solution, The System is designed under a privacy-by-default principle, ensuring that control over operational information remains exclusively within the client's environment.

2. Information Collected and Source of Data

The Company does not automatically collect, nor does it transmit to its external servers, any operational, financial, or strategic business information entered into The System. Information collection is limited solely and exclusively to the following scenarios and technical data:

• Identification and Local Access Data: Names, corporate email addresses, and authentication credentials. This information is stored and processed locally within the infrastructure provided by the client for the access control of its authorized users.
• Information for License Generation: Technical data from the installation environment (such as hardware identifiers or specific system parameters) required solely and exclusively for issuing, validating, and updating the software license file.
• Diagnostic and Technical Support Information (On-Demand): Specific technical data (event logs, error logs, or performance captures) only in the event that the client explicitly requests technical assistance or remote support. Outside of these explicit support requests, The System does not possess latent telemetry features.

3. Purpose of Data Processing

The limited technical data processed by RiskOS will be treated solely to:

• Validate the validity, concurrency, and legality of the platform's use license.
• Provide specialized technical support and manage critical incidents at the client's request.
• Ensure operational stability and the secure deployment of software updates.

4. Security and Sovereignty of Data

Since The System runs on the infrastructure selected and managed by the client, the client retains full sovereignty over the perimeter security measures of its operational data. For its part, The Company implements strict security controls throughout the software development lifecycle, ensuring the use of robust encryption algorithms for local credentials and advanced role-based access control (RBAC) mechanisms.

5. Absolute Ownership of Information

The Company recognizes and declares that all information, risk data, matrices, control records, and reports entered into or generated by The System are the exclusive and sovereign property of the client. Since there is no transfer or centralization of data flows to The Company's servers, the client maintains absolute physical and legal control over its information assets.

6. Local Storage and Session Technologies

For its correct technical operation, the web interface of The System utilizes local storage technologies within the user's browser (such as SessionStorage, LocalStorage, or essential technical cookies). These tools are employed for the sole purpose of keeping the authenticated user's session active, remembering visual preferences for the risk dashboards, and optimizing the loading speed of the modules. None of these technologies collect browsing habits or extract personal data for commercial purposes.

7. Retention and Destruction Periods of Technical Information

Any technical data temporarily collected by The Company for support purposes (such as database logs or memory dumps voluntarily provided by the client) will be retained only for the period necessary to resolve the specified technical issue. Once the request is resolved, The Company will proceed with the secure and permanent deletion of said support files from its workstations.

8. Transfer to Third Parties

The Company does not commercialize, transfer, or cede under any circumstances user or business information to third parties, as it lacks access, visibility, or persistence over the operational databases of The System once deployed in the client's corporate environment.

9. Modifications to this Policy

The Company reserves the right to modify this Privacy Policy to adapt it to future evolutions of the software architecture (such as optional integration with external APIs or cloud services). Any change affecting the nature of non-collection of data will be notified with explicit advance notice to the system administrators of the corporate client.

10. Contact Channels

For inquiries, IT audits, or consultations related to the technical aspects of this policy and the operation of the license validation system, the following official corporate contact channel is available: info@logics828.com.