Global Privacy Architecture

Global Privacy Policy

Last updated: October 2026 | Full International Regulatory Compliance

1. Controller Information & Global Scope

This Global Privacy Policy discloses the privacy practices of Telecapp Incorporated ("Company", "Data Controller", "we", "us"), a United States entity organized under Wyoming law (1309 Coffeen Avenue, STE 1200, Sheridan, WY 82801), operating the NetSkema platform (netskema.com).

This Policy applies globally to all users and is designed to strictly adhere to applicable data privacy frameworks, including:

  • United States: California Consumer Privacy Act (CCPA/CPRA), VCDPA, and US Federal Regulations.
  • European Union / UK: General Data Protection Regulation (GDPR / UK GDPR).
  • Singapore: Personal Data Protection Act 2012 (PDPA).
  • United Arab Emirates (Dubai): Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (UAE PDP Law) & DIFC Data Protection Law.

2. Categories of Data Collected & Legal Basis for Processing (GDPR Art. 6)

We collect data exclusively to provide, secure, and optimize NetSkema’s SaaS functionality. Data is processed in our non-relational NoSQL database clusters under the following legal bases:

  • Identity & Account Data (OAuth Tokens): Name, surname, and verified email address obtained via Google OAuth (and future IdPs including LinkedIn, Microsoft, or Meta). Legal Basis: Performance of Contract (GDPR Art. 6.1.b).
  • Technical Telecommunications & Blueprint Content: Floor plans, venue CAD vector renders, wall attenuation constants, and RF simulation parameters. Legal Basis: Performance of Contract & Legitimate Interest.
  • Financial & Billing Metadata: Payment timestamps, transaction IDs, plan names, and amounts. Payment card processing is executed entirely by PCI-DSS Level 1 certified processors (Stripe & PayPal). Telecapp Inc. never collects, stores, or processes raw Primary Account Numbers (PAN) or CVVs. Legal Basis: Legal Obligation & Contract Performance.

3. Express "Do Not Sell" Declaration & Data Sharing Protocol

ABSOLUTE PROHIBITION ON MONETIZATION: Telecapp Incorporated has never sold, rented, leased, or disclosed your personal data, project parameters, or uploaded blueprints to third parties, data brokers, or ad networks. We will never sell your data in the future.

Data disclosure occurs strictly with essential Third-Party Data Processors (Sub-processors) required to operate our service:

  • Infrastructure & Database Hosting: Cloud VPS Providers (Linux Server Clusters).
  • Payment Gateways: Stripe Inc. & PayPal Holdings, Inc.
  • Authentication Gateways: Google Cloud Identity / Firebase.

4. Technical Security, Incident Response & Breach Notification (72-Hour Mandate)

We employ enterprise-grade security controls: 256-bit SSL/TLS end-to-end transport encryption, isolated Linux container environments, input sanitization against SQL/NoSQL injection, and restricted API gateway access.

Data Breach Response: In accordance with GDPR Article 33, Singapore PDPA, and UAE PDP Law, in the unlikely event of a security incident impacting user data, Telecapp Inc. will notify affected users and relevant supervisory authorities within 72 hours of becoming aware of the breach.

5. International Data Transfers (SCCs) & Regional User Rights

Telecapp Inc. processes data primarily on secure cloud servers located in the United States, Latin America CDN and global nodes. For transfers of data outside the European Economic Area (EEA), United Kingdom, Singapore, or UAE, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent international transfer mechanisms.

Your Statutory Rights:

  • EU/UK Residents (GDPR): Right of access, rectification, erasure ("Right to be Forgotten"), restriction of processing, and data portability.
  • California Residents (CCPA/CPRA): Right to know, right to delete, right to non-discrimination, and right to opt-out of automated profiling.
  • Singapore & UAE Residents: Right to withdraw consent, access records, and request correction under PDPA and UAE PDP Law.

To exercise any statutory privacy right, email our Data Protection Officer (DPO) at info@telecapp.com.

6. Data Retention Schedule & Account Deletion

We retain personal data and project telemetry only as long as your account remains active or as needed to provide services, fulfill legal tax obligations (U.S. IRS C-Corp requirements), and resolve legal disputes. Upon formal written request for account deletion, all active user records will be permanently purged from our primary database servers within thirty (30) calendar days.

7. Contact Information & Corporate DPO

For questions, formal legal notices, or privacy queries regarding NetSkema, please contact our legal department:

Telecapp Incorporated
Attn: Legal & Data Protection Officer
1309 Coffeen Avenue, STE 1200
Sheridan, Wyoming 82801, USA
Email: info@telecapp.com