Data Security Policy

1. Purpose

This Data Security Policy describes how 300 Technologies LLC ("we," "us") protects information we process while delivering consulting services, software, and related systems.

Product- or engagement-specific terms in a signed Order control if they conflict with this page.

2. Principles

We protect data with a small set of standing rules:

• Collect only what is needed for the stated purpose.
• Limit access to authorized people and systems.
• Separate public marketing surfaces from private operational systems.
• Prefer local or customer-controlled processing where it reduces unnecessary data movement.
• Keep sensitive categories out of channels that are not designed for them.

3. Data we may process

Depending on the engagement, we may process business contact details you send us, Customer Data hosted in environments described in an Order, and technical logs needed to operate and secure the service.

4. How we protect it

We apply industry-standard safeguards appropriate to the sensitivity of the data and the nature of the service, including encryption in transit, credential hygiene, access control, environment separation, and auditability of material changes.

Where automation or AI assists operations, permissions are scoped and high-impact actions are designed to remain reviewable.

5. Retention & incidents

We retain information only as long as needed for the purpose collected, legitimate business records, security investigation, or legal obligation. Customer Data retention in licensed deployments follows the Order and the customer's own policies.

If we become aware of a security incident affecting Customer Data under our control, we will investigate, contain the issue, and notify affected customers without undue delay, consistent with applicable law and the Order.

6. Subprocessors & your role

We use reputable infrastructure and communications providers to deliver services and require appropriate security measures from them. A current subprocessors list for a given engagement is available on request.

Customers and partners remain responsible for the lawfulness of data they provide and for promptly revoking access when personnel leave or an engagement ends.

7. Contact

Security and privacy questions: legal@300tech.cloud. General contact: hello@300tech.cloud.