1. Who we are
72Technologies ("we", "us", "our") is a software development company with studios in Jacksonville, Florida (USA) and Lahore, Pakistan. We are the data controller for the personal information described in this policy. You can reach us at info@72technologies.com.
2. What we collect
We only collect data we actually need. That falls into three buckets:
2.1 Information you give us directly
- Contact form / newsletter: name, email, optional company name, phone number, the message you write to us, the page you submitted from.
- Email correspondence: any content of emails you send us, plus your email address.
2.2 Information collected automatically
- Server logs: IP address, user agent, referrer, requested URL, and timestamp. These are kept for up to 14 days for security and debugging.
- Cookies: see our Cookie policy for details. We use one essential cookie for the admin session and store your theme preference locally in your browser.
2.3 Information from third parties
We don't buy data, run ad-retargeting, or maintain marketing databases. The only third-party data we receive is delivery status from our email provider (e.g. bounce notifications).
3. Why we collect it
The legal bases under GDPR and similar regimes are:
- Contract / pre-contract — replying to your inquiry, delivering work you've engaged us for, sending project updates.
- Legitimate interest — securing the site, troubleshooting, and analysing aggregate traffic so the blog stays useful.
- Consent — newsletter delivery and any non-essential cookies. You can withdraw at any time without affecting our ability to keep doing work you've already hired us for.
4. Who we share it with
We share the minimum necessary with a short list of operational vendors. None of them sell your data.
- Vercel — hosting and edge delivery (USA / EU).
- Neon — managed Postgres database (USA).
- Anthropic — Claude API for the engineering blog content generator. Prompts contain only the public category brief — never user-submitted data.
- OpenAI — image generation for blog covers. Same rule: never user data.
- Your email provider / our SMTP — delivering transactional and admin emails.
We don't transfer your personal data outside our vendor chain without a lawful basis or your consent. If you're an EU/UK resident, transfers outside the EEA rely on Standard Contractual Clauses with our vendors.
5. How long we keep it
- Contact submissions: 24 months from last correspondence, unless an active project is in progress.
- Newsletter subscribers: until you unsubscribe.
- Server logs: up to 14 days.
- Project-related data: 7 years after engagement ends (US tax and contractual records).
6. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Ask us to delete data (subject to legal-retention requirements).
- Object to or restrict processing.
- Receive a portable copy of your data.
- Withdraw consent at any time.
- Lodge a complaint with a supervisory authority.
Email info@72technologies.com with the subject line "Privacy request" and we'll respond within 30 days.
7. Security
Data in transit is encrypted over TLS. Production databases are encrypted at rest, accessed over an IP-allowlisted connection with rotated credentials. Admin access is gated by an email-OTP second factor; there is no shared password.
8. Children
Our services are not directed at children under 16. We don't knowingly collect data from children. If you believe we have, email us and we'll delete it.
9. Changes to this policy
We may update this policy occasionally. Material changes will be announced via the site or email. The "Last updated" date at the top always reflects the current version.
10. Contact
Privacy questions, complaints, or data requests: info@72technologies.com. Postal address available on request.