Privacy Policy

Zeuscorp Cloud LLC (“Zeuscorp Cloud,” “Company,” “we,” “our,” or “us”) is dedicated to maintaining the highest standards of data privacy, confidentiality, and information security. This Global Privacy Policy (“Policy”) articulates how we collect, process, safeguard, and disclose personal data across our websites (including https://zeuscorpcloud.com), corporate intake portals, managed workforce pods, and enterprise consulting interactions in full compliance with the European Union General Data Protection Regulation (EU GDPR), United Kingdom GDPR, California Consumer Privacy Act (CCPA/CPRA), the Health Insurance Portability and Accountability Act (HIPAA), and the India Digital Personal Data Protection Act, 2023 (DPDPA).

1. Policy Scope & Entity Overview

This Policy applies to individuals who access or interact with Zeuscorp Cloud LLC, including visitors to our website, corporate representatives requesting workforce planning consultations, prospective client stakeholders, recruitment applicants, and enterprise clients utilizing our consultation workflows.

Zeuscorp Cloud LLC is a limited liability enterprise organized in the United States, operating operational and delivery hubs in Austin, Texas, USA; New York, New York, USA; London, United Kingdom; and Bengaluru, Karnataka, India.

2. Data Controller vs. Processor Roles

To ensure clear legal accountability under international privacy frameworks:

• Zeuscorp as a Data Controller: When you navigate our public website, fill out an inquiry form, request an SLA quote, subscribe to corporate research insights, or submit a career application, Zeuscorp Cloud LLC acts as an independent Data Controller (or “Business” under the CCPA/CPRA). We independently determine the purposes and means of processing that personal data.
• Zeuscorp as a Data Processor / Service Provider / Business Associate: When enterprise clients engage Zeuscorp Cloud LLC for dedicated workforce pods (including Business Process Outsourcing, Payroll Processing, Medical Billing/RCM, IT Managed Services, and Software Engineering), our clients act as the Data Controllers, and Zeuscorp acts strictly as a Data Processor, Service Provider, or HIPAA Business Associate. In this capacity, we process client customer data and operational records solely pursuant to executed Master Services Agreements (MSAs), Data Processing Addenda (DPAs), and Business Associate Agreements (BAAs), and strictly in accordance with documented client instructions.

3. Categories of Information Collected

We collect only information necessary to fulfill legitimate commercial, operational, and technical purposes:

A. Information Directly Provided by You

• Contact & Identification Data: Full legal name, corporate email address, direct phone / WhatsApp number, job title, and company/organization name.
• Operational Specifications: Inquired solutions (e.g., BPO, Payroll, Medical Billing, IT Managed Services, Custom Software), estimated pod sizing requirements, transaction volumes, current toolchain stacks (e.g., Zendesk, Salesforce, AWS, Epic EHR), and target SLA expectations submitted via our consultation forms.
• Recruitment Data: Resumes, employment history, technical skill certifications, and professional references submitted by applicants seeking engineering or specialist roles within our talent pods.
• Contractual & Billing Records: Corporate banking coordinates, billing addresses, tax identification numbers, and authorized signatory details for contracted clients.

B. Automatically Collected Telemetry & Device Information

• Network & Device Identifiers: Internet Protocol (IP) address, operating system, browser type and version, language settings, and time zone.
• Usage & Interaction Telemetry: Referring URL, pages visited, session duration, scroll depth, interaction timestamps, and system latency metrics utilized strictly to ensure site responsiveness and prevent denial-of-service disruptions.

C. Exclusion of Sensitive Consumer Data

Zeuscorp Cloud LLC does not collect, process, or sell sensitive consumer personal data (such as racial or ethnic origin, political opinions, religious beliefs, biometric identifiers, or genetic data) through our public websites.

4. Lawful Bases for Processing (GDPR / DPDPA)

Under Article 6 of the General Data Protection Regulation (EU/UK GDPR) and Section 4 of the India Digital Personal Data Protection Act, 2023, our processing of personal data is anchored in clear legal grounds:

• Performance of a Contract (Art. 6(1)(b)): Processing is necessary to take preparatory steps at your request prior to entering into a contract (e.g., preparing a customized workforce plan, calculating an SLA quote, or evaluating operational fit) and to perform contractual obligations under an executed SOW.
• Legitimate Enterprise Interests (Art. 6(1)(f)): Processing is necessary to protect our technical network infrastructure, detect and mitigate cybersecurity threats and DDoS attacks, optimize website performance, and maintain commercial relations with enterprise partners.
• Compliance with Legal Obligations (Art. 6(1)(c)): Processing is required to satisfy statutory accounting, tax reporting, corporate governance, anti-money laundering (AML), and regulatory disclosure obligations.
• Consent (Art. 6(1)(a)): Where legally required (such as for optional non-essential tracking cookies or marketing newsletters), processing is conducted based upon your freely given, specific, and informed consent, which you may revoke at any time.

5. Purposes of Information Processing

We process personal and operational data exclusively for authorized enterprise objectives:

1. Workforce Architecture & SLA Proposals: Evaluating your operational requirements to engineer dedicated talent pods, establish SLA metrics, and deliver binding proposals within our guaranteed 24-hour turnaround window.
2. Executing Managed Services & SOW Deliverables: Deploying, managing, and governing cross-functional pods across customer support, cloud engineering, payroll, and software development.
3. Information Security & Network Defense: Monitoring system integrity, preventing bot attacks, authenticating user credentials, and protecting confidential business assets.
4. Talent Acquisition & Vetting: Assessing technical candidates, validating certifications, conducting background checks where legally permissible, and onboarding dedicated pod specialists.
5. Statutory & Regulatory Compliance: Maintaining audit trails, adhering to financial reporting requirements, and complying with court subpoenas and legal investigations.

6. Cookies, Analytics & Privacy Signals

Our website uses limited, industry-standard cookies to ensure secure and efficient browsing:

• Strictly Necessary Cookies: Essential for foundational security, load balancing, CSRF protection, and session persistence. These cookies do not require consent and cannot be switched off in our systems.
• Functional Cookies: Enable enhanced functionality, such as remembering your consultation form inputs and UI display preferences.
• Aggregated Performance Analytics: De-identified, privacy-respecting telemetry used to analyze page load speeds, eliminate performance bottlenecks, and refine navigation flows.

Global Privacy Control (GPC) & Do Not Track: Zeuscorp Cloud LLC recognizes and honors automated browser privacy signals, including the Global Privacy Control (GPC) and Do Not Track (DNT) header specifications. When a valid GPC or DNT signal is detected, our systems automatically suppress optional tracking cookies.

Browser Controls: You may modify your browser settings at any time to reject or delete cookies. Please note that blocking essential cookies may affect the functionality of certain portal features.

7. Sub-processors & Zero-Sale Commitment

We disclose personal information strictly to vetted enterprise service providers (“Sub-processors”) who assist us in operating our corporate platform:

• Cloud Hosting & Edge Infrastructure: Tier-4 cloud infrastructure providers (e.g., Amazon Web Services, Cloudflare) for redundant hosting, edge caching, and DDoS mitigation.
• Transmission & Communication Desks: Enterprise SMTP delivery networks and secure form transport services (e.g., FormSubmit) for processing corporate consultation inquiries.
• Professional Advisors: Independent certified public accountants, external legal counsel, and compliance auditors bound by professional ethical confidentiality duties.
• Statutory Authorities: Law enforcement or governmental agencies only when strictly mandated by a valid subpoena, court order, or binding statutory directive.

All third-party Sub-processors are bound by written Data Processing Agreements that require SOC 2 / ISO 27001-equivalent security safeguards, strict purpose limitations, and mandatory data deletion upon contract termination.

8. International Cross-Border Data Transfers

Because Zeuscorp Cloud LLC operates delivery and advisory hubs across the United States, United Kingdom, and India, personal information collected by us may be transferred to, stored, and processed in jurisdictions other than your country of residence.

Transfer Safeguards: When we transfer personal data originating in the European Economic Area (EEA), United Kingdom, or Switzerland to countries that have not been granted an adequacy decision by the European Commission, we establish robust legal safeguards, including:

• Execution of the European Commission’s Standard Contractual Clauses (SCCs) (Module 1 Controller-to-Controller and Module 2 Controller-to-Processor).
• Execution of the UK International Data Transfer Addendum (IDTA).
• Implementation of supplementary technical controls, including end-to-end AES-256 encryption, zero-trust network access (ZTNA), and strict tenant segregation at our Bengaluru delivery center.

9. Enterprise Security Safeguards (SOC 2 & HIPAA)

We deploy defense-in-depth security architectures designed to safeguard enterprise information assets:

• Cryptographic Controls: All data transmitted to or from our web services is protected using Transport Layer Security (TLS 1.3). Data stored at rest across our databases and backup vaults is encrypted using AES-256.
• Access Management: Access to systems is governed by the Principle of Least Privilege and Role-Based Access Controls (RBAC). Multi-Factor Authentication (MFA) is strictly enforced for 100% of internal staff and pod specialists.
• Physical & Environmental Security: Our primary delivery hubs (including Novel MSR Tech Park, Bengaluru and Austin, TX) feature biometric access controls, 24/7 CCTV surveillance, and secure clean-room policies for sensitive operations.
• Continuous Auditing & Monitoring: 24/7/365 Security Operations Center (SOC) monitoring, automated intrusion detection, weekly vulnerability scanning, and routine independent third-party penetration testing.

10. Data Retention & Secure Disposal

We retain personal data only for as long as necessary to fulfill the purposes for which it was gathered, or as mandated by statutory, tax, or legal requirements:

• Consultation Inquiries: Prospective client specifications and inquiry details are retained for up to twenty-four (24) months following the date of inquiry, unless an active contract is executed.
• Contract & Billing Data: Retained for the duration of the commercial engagement plus seven (7) years following termination to satisfy federal, state, and international corporate tax obligations.
• Recruitment Candidate Data: Kept on file for up to twelve (12) months with candidate consent for future pod recruitment cycles.
• Cryptographic Sanitization: Upon expiration of applicable retention windows, data is irreversibly purged or anonymized in strict conformance with NIST Special Publication 800-88 Revision 1 (Guidelines for Media Sanitization).

11. Your Global Privacy Rights

Depending upon your geographic location and jurisdiction, you possess specific statutory rights regarding your personal information:

A. European Union & UK Rights (GDPR / UK GDPR)

• Right of Access (Art. 15): Obtain confirmation as to whether your data is processed and receive a copy of your personal data.
• Right to Rectification (Art. 16): Demand correction of inaccurate or incomplete personal records.
• Right to Erasure (“Right to be Forgotten”) (Art. 17): Request deletion of your personal data where retention is no longer justified.
• Right to Restriction of Processing (Art. 18): Restrict the processing of your data under specific statutory circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object to processing based upon legitimate interests or direct marketing.
• Right to Lodge a Complaint: Lodge a grievance with your local supervisory authority (such as the UK Information Commissioner’s Office - ICO).

B. California Consumer Privacy Rights (CCPA / CPRA)

• Right to Know / Access: Request disclosure of the categories and specific pieces of personal information collected about you in the preceding 12 months.
• Right to Delete: Request deletion of personal information collected directly from you, subject to legal exemptions.
• Right to Correct: Request correction of inaccurate personal records.
• Right to Opt-Out: Direct us not to sell or share your personal information. (Zeuscorp Cloud LLC does not sell or share personal data).
• Right to Limit Sensitive Data Use: Restrict use of sensitive personal information.
• Right to Non-Discrimination: Exercise your privacy rights free from discriminatory denial of services, price increases, or degraded service quality.

C. India Privacy Rights (Digital Personal Data Protection Act, 2023)

Data Principals in India possess the right to access a summary of personal data being processed, request correction and completion of inaccurate records, request erasure of data no longer required, and access grievance redressal mechanisms through our designated Data Protection Officer.

D. How to Exercise Your Privacy Rights

To submit a verified request to exercise any of the rights enumerated above, please email our Corporate Privacy Desk at zc@zeuscorpcloud.com. We will confirm receipt within ten (10) business days and fulfill verified requests within thirty (30) days (or forty-five (45) days under the CCPA/CPRA). To protect your privacy, we will verify your identity before processing your request.

12. HIPAA Business Associate Safeguards

When providing Medical Billing, Revenue Cycle Management (RCM), and healthcare support pods, Zeuscorp Cloud LLC operates in the capacity of a Business Associate as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the Health Information Technology for Economic and Clinical Health (HITECH) Act.

• Business Associate Agreements (BAAs): We enter into formal BAAs with all covered entities prior to receiving, transmitting, or processing any Electronic Protected Health Information (ePHI).
• Administrative, Physical & Technical Safeguards: We enforce the HIPAA Security Rule (45 CFR Part 160 and Part 164, Subparts A and C), including access controls, unique user IDs, automatic session timeouts, encrypted audit logs, and clean-desk operational protocols.
• Breach Notification Protocol: In accordance with the HIPAA Breach Notification Rule (45 CFR §§ 164.400–414), Zeuscorp maintains incident response runbooks to notify affected covered entities without unreasonable delay and in no case later than sixty (60) calendar days following confirmation of an ePHI security incident.

13. Children's Online Privacy Protection

Our website, consultation desks, and enterprise managed services are strictly intended for corporate entities, commercial partners, and individuals who are at least eighteen (18) years of age. We do not knowingly solicit, collect, or process personal data from children under the age of eighteen (18). If we learn that personal data of a minor has been collected without verified parental consent, we will take immediate measures to securely purge such data from our servers.

14. Policy Amendments & Notifications

We reserve the right to revise or update this Privacy Policy periodically to reflect evolving legal precedents, statutory amendments, or expansions in our global service delivery. The “Last Revised” timestamp at the top of this Policy indicates when changes were enacted. Material modifications affecting how your personal data is handled will be announced via a prominent notice on our website or communicated directly to designated enterprise contacts prior to taking effect. Continued interaction with our services following the posting of updates constitutes acceptance of the revised Policy.

15. Data Protection Officer & Contact Desk

If you have inquiries, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer and Corporate Privacy Desk: