Privacy Policy & International Data Protection

1. Data Controller & Data Protection Officer (DPO)

MySoftRank operates as the Data Controller under international data privacy legislations. For any questions, data-subject rights requests, or communications with our Data Protection Officer (DPO / Encarregado pelo Tratamento de Dados Pessoais), contact us directly at our dedicated compliance inbox:

Official Compliance & DPO E-mail: [email protected]

2. Data We Collect and Process

We apply the data minimization principle strictly. We collect only what is necessary to operate an objective software catalog, secure accounts, and process vendor claims:

Account Data: Display name, e-mail address, and password hash (argon2id/bcrypt) when you register or claim a vendor listing.
Catalog & Review Activity: Reviews, ratings, and vendor feeds (such as PAD JSON or MSR JSON) that you publicly submit or claim.
Technical & Security Telemetry: IP address (rate-limiting and anti-brute-force firewall only), browser user agent, session identifiers, and request timestamps.

3. Purposes and Lawful Bases for Processing

Every processing operation is anchored in a recognized lawful ground under applicable law:

Contract Performance: Providing catalog navigation, user profiles, vendor consoles, and authenticated services requested by you.
Legitimate Interests: Platform cybersecurity, anti-abuse, spam detection on reviews, and computing transparent ranking scores without commercial bias.
Legal Obligation: Preserving access and audit records where required by legislation (such as Marco Civil da Internet in Brazil, accounting rules for subscriptions).

4. Brazil: Brazilian General Data Protection Law (LGPD)

For individuals located in Brazil or data processed under Brazilian jurisdiction, the LGPD governs. You have clear, enforceable rights under Article 18 of the LGPD:

Art. 18 LGPD

Confirmation of processing existence; Access to your data; Correction of incomplete, inaccurate, or outdated data; Anonymization, blocking, or deletion of unnecessary or excessive data; Data portability in machine-readable JSON format; Deletion of personal data processed with consent; Information about public and private entities with which data is shared; Information about the possibility of refusing consent; Revocation of consent.

Encarregado pelo Tratamento de Dados Pessoais (DPO): Antonio Santos. Dedicated e-mail for LGPD communications and requests: [email protected].

5. Europe: General Data Protection Regulation (GDPR / UK GDPR)

If you reside in the European Economic Area (EEA) or the United Kingdom, Regulation (EU) 2016/679 (GDPR) and UK GDPR apply. We act as data controller and ensure fair, transparent processing.

GDPR Arts. 15-22

Right of access (Art. 15); Right to rectification (Art. 16); Right to erasure / 'right to be forgotten' (Art. 17); Right to restriction of processing (Art. 18); Right to data portability (Art. 20); Right to object (Art. 21); Rights in relation to automated decision making and profiling (Art. 22). You also have the right to lodge a complaint with your local EU Data Protection Authority (DPA).

International Transfers: When data is processed outside the EEA, we implement Standard Contractual Clauses (SCCs) and rigorous technical safeguards.

6. United States: State Privacy Rights (CCPA / CPRA & State Laws)

For residents of the United States, including California (California Consumer Privacy Act as amended by the CPRA), Colorado, Virginia, Connecticut, Utah, and other applicable states, we provide specific disclosures and statutory consumer rights:

Notice on Sale and Sharing: MySoftRank DOES NOT sell personal information and DOES NOT share personal information for cross-context behavioral advertising. We have not sold or shared personal information in the preceding 12 months.

CCPA / CPRA Consumer Rights

Right to Know: Request disclosure of categories and specific pieces of personal information collected; Right to Delete: Request deletion of personal information collected; Right to Correct: Request correction of inaccurate personal information; Right to Non-Discrimination: You will never receive discriminatory treatment or diminished service quality for exercising your privacy rights.

7. How to Exercise Your Rights (Self-Service & Direct Support)

MySoftRank provides immediate built-in tools for all registered users, plus a direct channel to our DPO for visitors and inquiries:

Download your data

Direct Data Export: Signed-in users can download an immutable, machine-readable JSON file containing all their account data, roles, reviews, and activity directly at the Account Center.

Download my data (JSON)

Delete your account

Direct Account Erasure / Pseudonymization: Signed-in users can execute permanent account pseudonymization (with password and CSRF confirmation) at the Account Center, immediately unlinking personal identifiers.

Account

Manual & Legal Requests: Send your request directly to [email protected]. We respond within statutory deadlines (e.g., within 15 days for LGPD, within 30 days for GDPR and CCPA).

8. Security Architecture and Data Retention

We implement defense-in-depth measures: database Row-Level Security (RLS), cryptographic password hashing (argon2id/bcrypt), rate-limiting firewalls, TLS in transit, and restricted administrative privileges. We retain account data only while the account is active, or as required by statutory record-keeping laws.