Privacy & Data Protection

CastleSoft Legal and Compliance Policy

1. Commitment to Privacy and Data Protection
At CastleSoft Pty Ltd, we’re committed to protecting your personal information with transparency and care, complying with global regulations like GDPR, CCPA, APPI, and PIPEDA. We collect only essential data (e.g., name, email, usage preferences) with your explicit consent, which you can withdraw via your CastleSoft ID settings. Your data is used solely to enhance our AI-powered services, like personalizing features, and is never sold or shared for advertising. You have rights to access, correct, delete, or restrict your data, or request portability, via our secure portal at castlesoft.com/privacy. Data is retained for up to 12 months after account inactivity, unless required by law. 

2. Information Security (ISO 27001 Compliance)
We adhere to ISO 27001 standards to secure your data across desktop, mobile, web, cloud, wearables, and IoT. All data is protected with AES-256 encryption and TLS 1.3 protocols, and CastleSoft ID accounts require two-step verification. Strict access controls prevent unauthorized access, including backdoors. Quarterly third-party audits ensure compliance and resilience.

3. Accessibility and Equality
Our #EqualityForAll philosophy drives us to create inclusive AI solutions, meeting WCAG 2.1 AA standards. From multilingual platforms serving 10,000+ users in 15 languages to adaptive tools for 200+ educational institutions, we empower diverse communities with accessible, secure technology.

4. Transparency and Accountability
We provide clear privacy notices before collecting data and communicate policy updates 30 days in advance via email and castlesoft.com. In the unlikely event of a data breach, we’ll notify affected users within 72 hours, per GDPR, and mitigate risks promptly.

5. Terms of Use and Licensing
Our software is licensed under our [Terms of Use](link), ensuring compliance with intellectual property laws. A 1-year limited warranty guarantees functionality as described (see castlesoft.com/warranty). CastleSoft® (Trademark No. 870506) and all software remain our property, with users granted non-exclusive licenses. Disputes are resolved per our Terms.

6. Global Compliance
We comply with GDPR, CCPA, APPI, PIPEDA, and other standards, ensuring lawful data handling and user rights worldwide. Contact our Data Protection Officer at privacy@castlesoft.com for inquiries.

Andrew Tierney 
CEO – CastleSoft Pty Ltd.