1. Introduction & Corporate Identity

Sues Tech Solutions (the “Company,” “we,” “us,” or “our”) is a commercial brand and enterprise software division operating as a Doing Business As (DBA) of Sues Beautiful Cuts LLC, a limited liability company registered in the State of Mississippi under Business ID #1560623. Sues Tech Solutions provides cloud-hosted SaaS platforms, enterprise digital assets (code blueprints, templates, and developer toolkits), and cloud engineering services delivered through direct sales, our proprietary Shopify storefront at suestech.com, and AWS Marketplace procurement channels.

This Privacy Policy explains how Sues Tech Solutions collects, uses, discloses, retains, and protects personal and business information obtained from visitors to our website, customers of our SaaS subscriptions and digital products, and end users of our cloud engineering services. By accessing or using any of our services, you acknowledge that you have read and understood this policy.

If you are accessing our services on behalf of a corporate entity, you represent that you have authority to bind that entity to this policy, and references to “you” include that entity.

2. Information We Collect

We collect information in three principal ways: (a) directly from you when you interact with our services, (b) automatically through telemetry and technical instrumentation, and (c) from authorized third-party processors acting on our behalf. The categories of data we process include:

2.1 Personal Identification Information

• Full name, corporate email address, phone number, and job title.
• Billing and postal address (Corporate HQ and billing contact).
• Company name, corporate tax identifiers, and procurement contact records.
• Account credentials (encrypted and salted; we never store plaintext passwords).

2.2 Payment & Billing Information

• Last four digits of payment card, card brand, and expiry metadata (full card data is handled exclusively by PCI-DSS compliant processors such as Stripe and Shopify Payments).
• Purchase history, subscription tier, renewal dates, and invoice records.
• For AWS Marketplace transactions: AWS account identifiers, Private Offer identifiers, and AWS EDP (Enterprise Discount Program) attribution metadata.

2.3 Technical, Telemetry & Usage Data

• IP address (anonymized where required by applicable law), browser type, operating system, device fingerprint, and referring URL.
• Session logs, API request telemetry, uptime monitoring events, and error trace identifiers.
• Feature-usage analytics (which modules, dashboards, and endpoints are accessed and by which authenticated workspace).

2.4 Cloud Integration & AWS IAM Credentials

• When you authorize Sues Tech Solutions to deploy or monitor cloud infrastructure in your AWS account, we may receive temporary AWS IAM role session tokens, cross-account AssumeRole metadata, and limited-scope access credentials. These credentials are strictly read-only unless you explicitly grant write permissions for automated deployments.
• AWS IAM credentials are stored in encrypted secrets vaults, never logged in plaintext, and rotated automatically per the least-privilege principle.

2.5 Communications Data

• Support tickets, chat transcripts, email correspondence, and feedback you voluntarily provide.
• Marketing communication preferences and opt-in/opt-out records.

3. How We Use Your Data

Sues Tech Solutions processes personal and business data only for legitimate, clearly defined business purposes. These include:

• Service Provisioning: Creating and maintaining your account, provisioning SaaS workspaces, delivering digital assets and code blueprints via secure download links, and managing subscription entitlements.
• Billing & AWS EDP Integration: Processing payments through Stripe and Shopify Payments, generating invoices, and — for AWS Marketplace customers — transmitting consolidated billing metadata to AWS so that qualifying purchases are properly reflected in your AWS Enterprise Discount Program (EDP) commitment tracking.
• Cloud Engineering & Deployment: Executing authorized infrastructure-as-code deployments, CI/CD pipelines, and monitoring within cloud environments you have granted us scoped access to.
• Security & Fraud Prevention: Detecting unauthorized access, anomalous activity, and abuse; conducting security audits; and enforcing our Terms of Service.
• Product Improvement & Telemetry: Aggregating anonymized usage signals to prioritize feature development, fix bugs, and improve performance.
• Legal & Regulatory Compliance: Complying with tax, accounting, anti-money-laundering, sanctions, and data-protection obligations applicable to us under US federal and state law.
• Customer Communications: Sending transactional notifications (invoices, password resets, service incidents), and — only with your consent — product updates and marketing communications. You may opt out of non-transactional messages at any time.

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, and we do not sell your personal information to any third party.

4. Data Sharing & Third-Party Processors

Sues Tech Solutions does not sell, rent, or trade your personal data. We disclose data only to carefully vetted processors that are contractually bound to confidentiality, data-minimization, and security obligations consistent with this policy. Our principal third-party processors include:

• Amazon Web Services (AWS): Infrastructure hosting, storage, and for AWS Marketplace customers, billing consolidation and EDP attribution.
• Stripe, Inc.: Payment processing for direct card transactions. Stripe is PCI-DSS Level 1 compliant.
• Shopify Inc.: E-commerce checkout, order management, and Shopify Payments for storefront transactions.
• Email and support processors (transactional email, helpdesk, ticketing systems) engaged strictly to deliver service communications.
• Analytics providers configured with IP anonymization and no cross-site tracking of identifiable users without consent.

We may also disclose data when required by lawful subpoena, court order, or regulatory request; when necessary to protect the rights, property, or safety of Sues Tech Solutions, our customers, or the public; or in connection with a merger, acquisition, or sale of assets — in which case we will notify affected users and require the successor to honor this policy.

International Transfers: Our primary infrastructure is hosted on AWS in United States regions. Where we transfer European Economic Area (EEA) or UK personal data to the United States, we rely on Standard Contractual Clauses (SCCs) and, where applicable, AWS’s Data Processing Addendum.

5. GDPR & CCPA Compliance

Sues Tech Solutions is committed to honoring data subject rights under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), as applicable to you. Regardless of your jurisdiction, we extend the following rights to all users:

• Right to Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data, subject to our legal retention obligations (e.g., tax records, active contracts).
• Right to Data Portability: You may request your data in a structured, machine-readable format (JSON or CSV).
• Right to Restrict Processing: You may request that we limit processing of your data under specific circumstances.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing.
• Right to Non-Discrimination (CCPA): We will not discriminate against you for exercising any privacy right.

To exercise any of these rights, submit a written request to support@suestech.com with the subject line “Data Subject Rights Request.” We will verify your identity and respond within 30 calendar days (extendable by an additional 30 days for complex requests, with notice). You may also lodge a complaint with your local supervisory authority.

6. Data Retention & Security

We retain personal data only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Typical retention windows are: account data during the subscription term plus 12 months; billing and tax records for 7 years (US tax law); support tickets for 24 months; server logs for 90 days.

Security controls applied to protect your data include:

• Encryption in transit: TLS 1.3 for all traffic between clients, our API edge, and backend services.
• Encryption at rest: AES-256 encryption for databases, backups, and object storage.
• Tenant-level data isolation: Multi-tenant isolation enforced at the application and database layers to prevent cross-customer data access.
• Access control: Role-based access control (RBAC), mandatory MFA for all administrative access, and least-privilege IAM policies.
• Security alignment: Our control framework is aligned with SOC 2 Trust Services Criteria (Security, Availability, Confidentiality).
• Monitoring & incident response: 24/7 telemetry, anomaly detection, and a documented incident response plan. In the event of a breach affecting your data, we will notify you and relevant authorities within legally required timeframes.

No method of electronic transmission or storage is 100% secure. While we implement industry-appropriate safeguards, you acknowledge that you provide personal data at your own risk and should protect your account credentials.

7. Contact Information — Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, please contact our designated Data Protection Officer:

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on this page at least 14 days before they take effect. Your continued use of our services after the effective date constitutes acceptance of the updated policy.