What we do with your information.

Corefinity is a software and digital services studio operating from Pakistan. We build websites, web applications, mobile apps, AI assistants and automation for clients worldwide, and we run this website at https://corefinity.tech.

This policy explains what we do with personal information when you use this website or engage us for work. For anything in it, you can reach us at corefinity.tech@gmail.com.

We keep this deliberately small. There is no account system on this site, and nothing here asks you to register.

When you send a project brief. The form on our contact page asks for your name, your email address, the type of project you have in mind, and a description of it. Those four fields are the whole of it. We do not ask for a phone number, a company address, or payment details at this stage.

When you email us. We hold whatever you choose to put in the message, along with your email address, so that we can reply and keep track of the conversation.

When you become a client. Delivering a project usually means we hold billing details, the contact details of people on your team, and access credentials for the systems we are asked to build on. Anything of that kind is covered by the agreement we sign with you rather than by this page alone.

Technical information. Our host records standard server logs, including IP address, browser type and the pages requested. These exist to keep the site running and secure. We do not use them to build a profile of you.

We use personal information for these purposes only:

• To answer your enquiry and prepare a proposal or quote.
• To deliver, support and invoice work you have engaged us for.
• To keep the website available, fast and protected against abuse.
• To meet legal, tax and accounting obligations that apply to us.

Where the law requires a stated legal basis, we rely on the steps taken at your request before entering a contract, on performing that contract once agreed, on our legitimate interest in running and securing this site, and on your consent for anything optional.

We do not sell personal information. We do not rent, trade or share it with data brokers, advertising networks or list builders.

We do not add you to a marketing list because you sent a project brief. If you enquire and decide not to proceed, that is the end of it. You will not receive a sequence of follow up emails from us.

We do not use the content of your brief, your codebase or your business data to train machine learning models, our own or anyone else's.

We share personal information only with service providers who help us run the business, and only to the extent they need it:

• Hosting. This website is hosted on Vercel, which processes server logs and serves the pages.
• Email. The address you write to is handled by our email provider.
• Professional advisers. Accountants or legal advisers where we are obliged to involve them.

We may also disclose information where the law compels us to, or where it is necessary to establish or defend a legal claim.

Because we work with clients internationally and our providers operate globally, information may be processed outside Pakistan. Where that happens we rely on the safeguards those providers put in place under their own data protection terms.

Project briefs that do not turn into work are deleted once they are clearly no longer live, and in any case within two years.

Records connected to paid work are kept for as long as tax and accounting rules require, then deleted.

Server logs are short lived and rotate automatically. Ask us to delete something sooner and we will, unless we are legally required to keep it.

You can ask us to:

• Tell you what personal information we hold about you.
• Give you a copy of it.
• Correct it if it is wrong.
• Delete it.
• Stop using it for a particular purpose.
• Withdraw consent you previously gave.

Email corefinity.tech@gmail.com and we will respond within 30 days. We will not charge you for asking, and we will not treat you differently for having asked.

If you are in the United Kingdom or the European Economic Area, the General Data Protection Regulation gives you these rights directly, including the right to complain to your national supervisory authority. We apply the same standard to everyone who contacts us, wherever they are.

The site is served over HTTPS. Access to client systems and credentials is limited to the people working on that project, and credentials are handed back or rotated at the end of an engagement.

No system is perfectly secure, and we would rather say so than claim otherwise. If we ever discover a breach affecting your personal information, we will tell you and the relevant authority promptly.

This website and our services are meant for businesses and for adults. We do not knowingly collect information from anyone under 18. If you believe a child has sent us personal information, write to us and we will delete it.

How this site handles cookies and similar storage is set out in full on our cookie policy, including how to change your choice at any time.

We update this page when what we do changes. The date shown beside these contents is when the current version took effect. If a change materially affects how we handle your information, we will make that clear rather than quietly editing the text.