Privacy Policy
Effective Date: October 2026 · Entity: ERUDORA Technologies (“Company”, “we”, “us”, or “our”)
Governing Jurisdiction: Commonwealth of Virginia, United States
1. Overview & Commitment to Data Protection
ERUDORA Technologies is an independent custom software development and technology engineering partner headquartered in Northern Virginia (Washington D.C. Metro Area), United States. We are committed to safeguarding the privacy and security of all business visitors, clients, and prospective commercial partners who interact with our website (erudoratech.com / erudoratech.com) and associated communication channels.
This Privacy Policy explains what personal data we collect, why we collect it, how it is processed, our legal bases for processing, and the comprehensive rights available to you under United States federal and state laws, including the Virginia Consumer Data Protection Act (VCDPA) and the California Consumer Privacy Act (CCPA/CPRA).
2. Categories of Information We Collect
We collect information in three ways: directly from your submissions, automatically via your browser interaction, and through verified third-party communication channels.
A. Information You Voluntarily Provide
- • Contact Inquiries: Full Name, Business Email Address, Direct Phone Number, Company / Organization Name.
- • Project Scope Data: Project descriptions, estimated budgets, architectural requirements, timeline expectations, and technical specifications submitted via our Request for Proposal (RFP) or discovery forms.
- • Communications: Notes, transcripts, and messages sent via direct phone calls (+1 703-932-6801), direct email ([email protected]), or WhatsApp business messaging.
B. Automatically Collected Technical Data
- • Network & Device Identifiers: Internet Protocol (IP) address, browser type and version, operating system, language preferences, and referring URLs.
- • Cloudflare Edge Telemetry: Connection metadata, TLS/SSL handshake status, and security threat scoring to protect against Distributed Denial of Service (DDoS) attacks.
- • Anti-Bot Challenges: Dynamic mathematical verification challenges and honeypot field interactions designed to block automated spam bots.
C. Analytics & Advertising Attribution Telemetry
- • Google Analytics 4 (GA4): Aggregated user session telemetry, pageviews, scroll depth, and commercial conversion events via Measurement ID
G-DLJ1VF6SXQ. - • Meta Pixel & Conversion API (CAPI): Referral tracking and lead event attribution for visitors arriving from Meta marketing campaigns.
- • Microsoft Clarity: Pseudonymized behavioral heatmaps, click maps, and session replays to optimize site navigation and fix layout friction.
3. Purposes and Legal Bases for Data Processing
We process collected data exclusively for lawful business purposes, including:
- Evaluating & Scoping Project Inquiries: Reviewing architectural requirements, conducting feasibility analyses, and preparing written proposals and statements of work.
- Contractual Execution & Mutual NDA: Fulfilling obligations under mutually executed technology engineering contracts, Statements of Work (SOW), and Non-Disclosure Agreements.
- Site Security & Fraud Prevention: Detecting malicious bots, blocking unauthorized network penetration, and securing our origin servers under the US Computer Fraud and Abuse Act (CFAA).
- Marketing Attribution & Measurement: Analyzing campaign ROI, keyword effectiveness, and conversion rates to optimize our commercial outreach for US businesses.
4. Absolute Statement: We DO NOT Sell or Rent Personal Data
ERUDORA Technologies does not sell, rent, monetize, or lease your personal information, commercial inquiries, or project briefs to any third-party data brokers, advertising networks, or unauthorized entities under any circumstances. We treat all technical requirements, architectural diagrams, and company details with strict confidentiality.
5. Authorized Service Providers & Data Transfers
To operate our high-availability website and enterprise communications, we transmit data to select, industry-standard third-party infrastructure providers bound by contractual confidentiality:
- • Cloudflare, Inc. (USA): Global Content Delivery Network (CDN), SSL/TLS termination, and DDoS firewall protection.
- • Resend, Inc. (USA): Cryptographically encrypted transactional email relay for lead notification delivery.
- • Google LLC (USA): Aggregated site telemetry via Google Analytics 4 (GA4) and Google Search Console.
- • Meta Platforms, Inc. (USA): Advertising conversion attribution via Meta Pixel.
- • Microsoft Corporation (USA): Session telemetry and UX heatmaps via Microsoft Clarity.
6. State Privacy Rights (Virginia & California)
A. Virginia Consumer Data Protection Act (VCDPA) Rights
Under Virginia Code § 59.1-575 et seq., Virginia residents are entitled to:
- Confirm whether ERUDORA Technologies is processing your personal data and access such data.
- Correct inaccuracies in your personal data.
- Delete personal data provided by or obtained about you.
- Obtain a portable, readily usable copy of your personal data.
- Opt-out of targeted advertising or profiling.
B. California Consumer Privacy Act (CCPA / CPRA) Disclosures
California residents have the right to request disclosure of categories of personal information collected, request deletion, correct inaccurate data, and be free from discrimination for exercising these statutory rights.
To exercise any statutory privacy right under Virginia, California, or other US state laws, email us at [email protected] with the subject line “Privacy Rights Request”. We verify and respond to all verifiable requests within 45 days.
7. Children's Online Privacy (COPPA Compliance)
Our website and engineering services are strictly commercial in nature and intended exclusively for business professionals and founders aged 18 and older. We do not knowingly solicit, collect, or process personal data from children under the age of 13 under the Children's Online Privacy Protection Act (COPPA).
8. Data Security, Retention & Encryption
We employ enterprise technical safeguards to prevent unauthorized access, alteration, or disclosure:
- • Encryption in Transit: 100% of web sessions are enforced over HTTPS utilizing TLS 1.3 encryption and HTTP Strict Transport Security (HSTS).
- • Origin Server Cloaking: Our origin server IP is hidden behind Cloudflare edge proxies with automated drop rules blocking direct external probes.
- • Access Controls: Inquiries are accessible only to senior authorized engineering leads under strict access restrictions.
- • Data Retention: Inactive project inquiries are securely archived or expunged after 24 months unless an ongoing contractual relationship requires continued retention.
9. Contact Our Legal & Data Compliance Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our compliance under United States privacy legislation, please contact our team: