SoftSync Privacy Notice
Version 2026-10-25.1. Draft notice for review by the SoftSync data controller before allowing public registration.
Information collected
SoftSync stores your name, email address, optional company and phone numbers, contact address, encrypted password hash, account status, agreement timestamps and authentication/audit records. Account email verification and MFA are required. Optional marketing opt-in is recorded separately.
Purposes and security
Data is used to create and secure accounts, manage repositories, prevent abuse, investigate incidents and operate the service. Registration uses an on-site visual or accessible question challenge held briefly in the PHP session, without sending CAPTCHA data to a third-party provider. Challenge responses are consumed after use; abuse prevention also uses rate limiting, email verification and mandatory MFA.
Rights and retention
Contact the SoftSync operator to request access, correction, export, objection or deletion, subject to legitimate security and legal retention requirements. Retention periods, controller contact information, lawful bases, processors and international-transfer details must be finalised before public registration is enabled.