Softic – Privacy Policy for Azure Marketplace Offers

This Privacy Policy explains how Softic processes and protects customer data in connection with its Azure Marketplace offers, including virtual machines, .NET applications, document management and AI-based solutions.

Note: This English version is provided for Microsoft Azure Marketplace and international customers. A French version can be provided on request.

1. Introduction

Softic is committed to protecting the privacy, confidentiality, and security of all customer data processed through our Azure Marketplace virtual machines, applications, and AI-powered solutions, including Softic IES, Softic GED, and Softic IA Search. This Privacy Policy explains how data is collected, used, stored, and protected when customers deploy or interact with our Azure Marketplace offers.

2. Data We Collect

Softic does not collect personal data directly from users unless it is voluntarily provided through support channels or required to operate the service. The virtual machine itself does not transmit any customer data to Softic by default.

Categories of data that may be processed within the customer’s Azure environment include, but are not limited to:

Application data generated by the customer’s applications (.NET, APIs, microservices, background services).
Documents processed for indexing, OCR, AI classification, or search (Softic GED, Softic IA Search, etc.).
System logs and telemetry generated within the customer’s Azure subscription.
Configuration data and technical details shared by the customer for troubleshooting or support purposes.

All data remains under the customer’s control within their own Azure subscription and tenant.

3. How Customer Data Is Used

Softic processes customer data solely for the following purposes:

Operating and supporting the proper functioning of the VM and Softic solutions.
Improving performance, security, and reliability of the service.
Assisting customers in troubleshooting or technical support, when they explicitly request it.
Enabling and improving AI-based features such as search, document indexing, OCR, and automation.
Complying with legal or regulatory obligations where applicable.

Softic does not sell, rent, or share customer data for advertising or unrelated commercial purposes.

4. AI, Machine Learning, and Data Processing

For offers that include AI functionalities (for example Softic IA Search, AI pipelines, OCR, embeddings, semantic search):

Customer data is used only to perform the requested AI operation (indexing, OCR, classification, search, etc.).
Data is not retained beyond the operational need unless the customer chooses to store it in their own Azure services.
Customer data is never used to train AI models unless the customer explicitly authorizes such use in writing.
Processing typically occurs inside the customer’s Azure environment or within Azure services controlled by the customer.

Softic respects responsible AI principles and aligns with Microsoft’s AI and data protection guidelines.

5. Data Storage and Retention

Softic does not store customer data outside the customer’s Azure subscription, except in the following limited situations:

When the customer explicitly shares data with Softic for support or diagnostic purposes.
When retention is required by applicable law or regulation (and then only for the necessary duration).

When a support case is closed, Softic deletes any customer data that was provided for diagnostic or troubleshooting purposes.

6. Security and Compliance

Softic implements industry-standard security and compliance practices, including, where applicable:

Encryption in transit and at rest (using TLS and Azure-managed or customer-managed keys).
Role-based access control (RBAC) and least-privilege principles.
Hardened operating systems, network isolation (VNET, NSG, Private Endpoints), and secure configuration baselines.
Logging, monitoring, and audit trail capabilities via Azure Monitor, Log Analytics, and Application Insights.
Compliance with GDPR and other applicable data protection regulations when relevant to the customer’s location and sector.

Each customer remains responsible for configuring and securing their own Azure tenant, subscriptions, and virtual machines.

7. Third-Party and Microsoft Azure Services

Softic solutions may integrate with Microsoft Azure services such as:

Azure Cognitive Search and Azure AI Services.
Azure SQL Database or SQL Managed Instance.
Azure Storage (Blob, Files, etc.).
Azure Key Vault, Azure Monitor, Application Insights, and other Azure components.

Use of these services is governed by Microsoft’s own terms and privacy policies. Softic does not transmit customer data to any third party other than Microsoft Azure services explicitly chosen or configured by the customer.

8. Customer Rights

Subject to applicable laws, customers may exercise the following rights regarding their data:

Request information about how their data is processed in connection with Softic solutions.
Request access to, correction of, or deletion of personal data held by Softic in the context of support or services.
Request portability of certain data, where legally applicable.
Object to or restrict certain types of processing, where applicable.
Terminate their subscription to Softic solutions on Azure Marketplace.

Requests may be submitted using the contact details provided in section 10 of this policy.

9. International Data Transfers

Softic does not intentionally transfer customer data outside the customer’s selected Azure region or jurisdiction, except:

When support or expert intervention requires limited access and is explicitly authorized by the customer.
When such transfer is required by law and performed in accordance with applicable safeguards.

In all cases, Softic aims to minimize data exposure and apply appropriate contractual and technical protections.

10. Changes to This Privacy Policy

Softic may update this Privacy Policy from time to time to reflect changes in technology, regulation, or service features. The latest version will always be published on this page with an updated “last updated” date.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or data protection in relation to our Azure Marketplace offers, you may contact us at:

Softic – Data Protection
Email: contact@softic.com.tn
Website: https://softic.com.tn