Privacy Policy for EntropyX

1. Information We Collect

Current Data Collection Policy

Potential Future Data Collection

If Ownership Changes: Future owners may choose to collect data, such as:

• File processing metadata (names, sizes, types, compression statistics)
• Application usage data and analytics
• System information for performance optimization
• Error logs and crash reports for troubleshooting
• Basic device and browser information (web version)

Any such changes would require explicit user notification and updated privacy policies.

2. How We Use Your Information

Current Usage Policy

Under Current Ownership: Since I collect no data, I do not use any user information for any purpose. All file processing occurs locally on your device without any external data transmission or storage.

Potential Future Usage

If Ownership Changes: Future owners may use collected data for purposes such as:

• File Processing: Compress, decompress, and convert your files as requested
• Performance Optimization: Improve compression algorithms and processing speed
• Technical Support: Diagnose issues and provide customer assistance
• Software Improvement: Enhance features and user experience

File Handling Commitment

Regardless of ownership:

• File processing will prioritize local processing when possible
• File content will not be permanently stored on external servers
• Processed files will be automatically deleted from any temporary storage

3. Information Sharing and Disclosure

Current Sharing Policy

Under Current Ownership: Since I collect no data, I have no user data to share, sell, trade, or rent to third parties.

Future Sharing Policy

If Ownership Changes: Future owners commit to:

• Not selling, trading, or renting personal information to third parties for commercial purposes
• Not accessing or storing the content of files you process
• Maintaining local or isolated secure processing environments

Legal Disclosure Requirements

Regardless of ownership, information may only be disclosed when:

• Required by law or legal process
• Necessary to protect rights or property
• You provide explicit consent
• Emergency situations requiring disclosure to prevent harm

4. Data Security

Encryption and Protection

• All file processing uses industry-standard encryption (AES-256, Fernet)
• Desktop version uses Windows DPAPI when available for enhanced security
• Secure data transmission using HTTPS/TLS protocols
• Regular security audits and updates

Access Controls

• Strict access controls limit who can access any data
• Multi-factor authentication for administrative access
• Regular security training for personnel

5. Data Retention

Current Retention Policy

Under Current Ownership: Since no data is collected, there is no data retention. All file processing occurs locally on your device with no external storage.

Future Retention Policy

If Ownership Changes: Future data retention practices may include:

• Desktop Version: Data remains on user's local device
• Web Version: Temporary files deleted immediately after processing
• Logs: System logs retained for debugging purposes (maximum 30 days)
• Analytics: Aggregated, anonymized usage statistics (maximum 12 months)
• Session Data: Individual session data deletion (maximum 90 days)

6. Your Rights and Choices

Current User Rights

Under Current Ownership: Since no data is collected, you have:

• Complete control over all file processing (occurs locally)
• No data to request deletion of (no data is stored)
• No analytics to disable (no analytics are collected)

Future User Rights

If Ownership Changes: Future user rights may include:

• Desktop Version: Complete control over all data processing and storage
• Web Version: Option to disable analytics and usage tracking
• Data Deletion: Right to request deletion of any stored data
• Opt-Out Options: Disable usage analytics in application settings
• Contact Rights: Contact support to opt out of all data collection
• Uninstall Rights: Uninstall software to stop all data processing

7. International Users

• Data processing may occur in the United States and other countries
• We comply with applicable international privacy laws
• EU users have additional rights under GDPR (see Section 8)

8. GDPR Compliance (EU Users)

Legal Basis for Processing

• Legitimate Interest: Software functionality and improvement
• Consent: Analytics and optional features
• Contract Performance: Providing requested services

Your GDPR Rights

• Access: Request information about data processing
• Rectification: Correct inaccurate personal data
• Erasure: Request deletion of personal data
• Portability: Receive your data in portable format
• Objection: Object to certain processing activities

Contact me at angelo@entropyxcomp.com to exercise these rights.

9. Children's Privacy

EntropyX is not intended for users under 13 years of age. I do not knowingly collect personal information from children under 13. If I discover I have collected such information, I will delete it immediately.

10. Third-Party Services

Current Third-Party Integration

Under Current Ownership:

• Ghostscript: Used for PDF optimization (local processing only, no data sharing)
• System APIs: Windows COM, PowerShell (local processing only)
• Cloud Storage: No automatic integration; user has complete control over any cloud interactions

Future Third-Party Integration

If Ownership Changes: Future integrations may include:

• Optional cloud storage integration (user-controlled)
• Privacy-focused analytics services (anonymized and aggregated data only)
• No personal information shared with third-party providers

Third-Party Commitment

Regardless of ownership:

• No file content will be shared with third parties
• Any analytics data will be anonymized and aggregated
• Users will maintain control over cloud storage integrations

11. Updates to Privacy Policy

• I may update this policy to reflect changes in practices
• Users will be notified of material changes via software updates
• Continued use after changes indicates acceptance of new terms
• Previous versions available upon request

12. Contact Information

• Developer: Angelo Frammartino
• Privacy Questions: angelo@entropyxcomp.com
• General Support: angelo@entropyxcomp.com
• Response Time: I respond to privacy inquiries within 30 days.

13. Ownership Changes and Business Transfers

Current Ownership Commitment

Under current ownership by Angelo Frammartino, EntropyX maintains a strict no-data-collection policy as outlined in this privacy policy.

Future Ownership Changes

In the event that EntropyX is sold, acquired, merged, or ownership is otherwise transferred:

• The new owners may implement different data collection and privacy practices
• Users will be notified at least 30 days in advance of any material changes to data collection practices
• A new privacy policy will be implemented reflecting any changes
• Users will have the option to discontinue use of the software before new policies take effect
• Existing users' data handling preferences will be respected during any transition period

User Rights During Transition

• Right to be notified of ownership changes
• Right to review new privacy policies before they take effect
• Right to discontinue use without penalty
• Right to request deletion of any data collected under new ownership

14. Legal Compliance

This Privacy Policy is governed by the laws of Ohio, United States and complies with:

Privacy Regulations

• California Consumer Privacy Act (CCPA)
• General Data Protection Regulation (GDPR)
• Children's Online Privacy Protection Act (COPPA)

Security Frameworks (Current Implementation)

Based on our current security architecture, EntropyX implements controls aligned with:

• NIST Cybersecurity Framework - Comprehensive logging, access controls, and incident response
• ISO 27001 - Information security management with audit trails and encryption
• SOC 2 Type II - Security, availability, and confidentiality controls
• CIS Controls - Critical security controls including secure configuration and data protection

Data Governance Standards

• NIST Privacy Framework - Privacy risk management and data minimization
• FAIR (Factor Analysis of Information Risk) - Risk assessment and management
• COBIT - IT governance and risk management

Technical Security Standards

• OWASP Security Guidelines - Secure coding practices and vulnerability prevention
• SANS Critical Security Controls - Essential cybersecurity measures
• NIST 800-53 - Security and privacy controls for federal information systems

Audit and Monitoring Compliance

Our comprehensive logging system supports compliance with:

• Sarbanes-Oxley (SOX) - Financial data integrity and audit trails
• FISMA - Federal information security management
• PCI DSS - Payment card industry data security (when applicable)

Future Compliance Considerations

If ownership changes, new owners may implement additional compliance frameworks based on business requirements and regulatory obligations.