Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how Stereasoft ("we", "us") collects and uses personal data when you use our website, submit an enquiry, work with us as a client, or apply for a role. Unless stated otherwise, we act as the data controller for the processing described in this document.

1.Scope

This policy applies to personal data collected through our website, contact forms, email correspondence, contracts, and recruitment channels. It does not cover third-party websites or services linked from our site.

We are a remote-first engineering company based in Ukraine. For questions about this policy or your personal data, contact hello@stereasoft.ua.

2.Personal data we collect

Data you provide

Identity and contact details, such as name, email address, phone number, and company name.
Project and enquiry information shared in messages, briefs, or discovery calls.
Contract, billing, and account information required to deliver services.
Recruitment information, including CVs, portfolios, and application correspondence.

Data collected automatically

When you visit our website, our hosting and infrastructure providers may process limited technical data, including IP address, browser type, device information, and server logs. We use this information for security, troubleshooting, and service reliability.

We do not sell personal data or use advertising trackers. See our Cookie Policy for information about cookies.

3.How we use personal data

To respond to enquiries and manage client relationships.
To scope, deliver, support, and invoice engineering services.
To operate, secure, and improve our website and internal systems.
To review applications and communicate about careers opportunities.
To comply with legal obligations and establish, exercise, or defend legal claims.

4.Legal basis

Depending on the context, we rely on one or more of the following legal bases:

Performance of a contract, or steps taken at your request before entering into a contract.
Legitimate interests, including operating our business, communicating with prospects and clients, and maintaining website security, where those interests are not overridden by your rights.
Legal obligation, where processing is required by applicable law.
Consent, where you have given clear consent, for example before submitting our contact form. You may withdraw consent at any time.

For individuals in the European Economic Area and United Kingdom, we process personal data in accordance with the GDPR and UK GDPR. For individuals in Ukraine, we also take into account the Law of Ukraine on Personal Data Protection.

5.Retention

Enquiry records are kept for up to 24 months after our last meaningful contact, unless a client relationship continues.
Client and project records are retained for the duration of the engagement and for up to 7 years afterwards where required for accounting, tax, or legal purposes.
Security and server logs are retained only for as long as necessary for monitoring and incident response.

You may request deletion of your personal data where we have no overriding legal or contractual reason to retain it.

6.Sharing and processors

We do not sell personal data. We may share information with service providers that support our operations, such as hosting, email delivery, source control, and project tooling. Those providers process data on our instructions and under appropriate safeguards.

We may also disclose information to professional advisers or competent authorities where required by law, or in connection with a merger, acquisition, or asset sale subject to equivalent protections.

Where we process personal data contained in client systems, we do so on the client's instructions and, where applicable, under a Data Processing Agreement.

7.International transfers

Personal data may be processed in Ukraine, the European Economic Area, the United Kingdom, the United States, or other countries where our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognised under applicable law.

8.Security

We apply technical and organisational measures appropriate to the nature of our services, including encrypted connections, access controls, and least-privilege access for personnel. No method of transmission or storage is completely secure.

9.Your rights

Subject to applicable law, you may have the right to access, rectify, erase, restrict, or object to certain processing, request portability, withdraw consent, or lodge a complaint with a supervisory authority.

To exercise your rights, email hello@stereasoft.ua. We will respond within the timeframe required by applicable law.

10.Children

Our services are directed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe we have received such data, contact us and we will delete it promptly.

11.Changes

We may update this Privacy Policy from time to time. The current version will be published on this page with an updated date. Material changes may also be communicated to active clients where appropriate.

12.Contact

For privacy enquiries, contact:

Stereasoft
Remote-first
Ukraine
hello@stereasoft.ua