LEGAL DIRECTIVE // PRIVACY & COMPLIANCE

Privacy Policy & Data Sovereignty

How SOUDIV Technologies safeguards client confidentiality, protects visitor information, and ensures uncompromising data sovereignty across our engineering consultancy and software platforms.

EFFECTIVE: OCTOBER 31, 2026VERSION: 2026.2JURISDICTION: GLOBAL (GDPR / CCPA / DPDP)
SOVEREIGNTY

Zero Metric Egress on NIRIKSH

All NIRIKSH system telemetry, process audits, and server metrics stay strictly within your private VPC or on-premises environment. We never exfiltrate operational metrics to SOUDIV.

NO BROKERAGE

Zero Data Sale or Rental

We never sell, monetize, or trade your personal information, consultation briefs, or project requirements to data brokers, ad networks, or AI scrapers.

HYPER-LEAN

Essential Local Storage Only

No invasive tracking beacons, profiling pixels, or cross-site cookies. Browser storage is used solely to remember your preferred UI theme ('soudiv-theme').

INTELLECTUAL PROPERTY

100% Client IP Ownership

All custom source code, application architectures, and sensitive schemas built during engineering engagements belong exclusively to you under enforceable mutual NDAs.

[SEC-01]

Scope & Data Controller

This Privacy Policy governs the processing of personal data and project materials by SOUDIV Technologies (“SOUDIV”, “we”, “us”, or “our”), operating as the data controller for information collected through our official website (soudiv.com), client consultations, and commercial engagements.

SOUDIV engineers modern web applications, mobile platforms, automated AI workflows, DevOps infrastructure, and develops the NIRIKSH Linux server control plane. We adhere to global data protection benchmarks, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection Act (DPDP Act).

Client Engagements & NDAs: Where software engineering contracts or bespoke Master Services Agreements (MSAs) specify stricter data governance terms or mutual non-disclosure protections, the provisions of the mutually executed agreement shall supersede this general policy.
[SEC-02]

Information We Collect

We collect information strictly necessary to provide engineering services, respond to inquiries, and maintain reliable infrastructure:

Direct Inquiries & Consultations
  • Full Name and Professional Title
  • Work Email Address
  • Phone / WhatsApp Number (optional)
  • Company or Organization Name
  • Project Brief, Budget Range & Target Timeline
Technical & Commercial Records
  • Architectural specifications & technical requirements
  • Corporate tax identifiers (e.g. GSTIN / VAT where applicable)
  • Authorized billing and technical representative contacts
  • Signed contracts, statements of work & change requests
Automated Network & Security Logs

When accessing our public website, standard edge network servers log ephemeral metadata including IP address, HTTP request headers, browser user-agent, and timestamps. This data is collected strictly for DDoS mitigation, load balancing, and preventing malicious network attacks.

Explicit Negative Declaration: We do NOT collect biometric data, sensitive personal categories (such as racial or ethnic origin, political affiliations, religious beliefs), or track users across unrelated third-party websites.
[SEC-03]

NIRIKSH Platform Data Sovereignty Guarantee

Architectural Privacy Architecture of NIRIKSH
LOCAL-FIRST VERIFIED

NIRIKSH is SOUDIV's proprietary Linux server control plane and management system. We recognize that infrastructure telemetry contains confidential workloads, internal topology, and operational intelligence. We engineered NIRIKSH with an uncompromising commitment to data sovereignty:

Passive Local Telemetry

System metrics (CPU, RAM, disk I/O, network packet rates, process tables, systemd statuses) are recorded and stored locally on your managed nodes or private VPC storage.

Zero Telemetry Egress

Operational data, log streams, application secrets, SSH configurations, and environment variables are never transmitted to SOUDIV or external analytics aggregators.

Cryptographic Licensing

Plan validation uses minimal asymmetric cryptographic token checks that verify tier entitlements without exfiltrating server hostnames, private IP allocations, or customer payloads.

Questions regarding NIRIKSH air-gapped deployment configurations?View NIRIKSH Details
[SEC-04]

Purposes & Legal Bases for Processing

Under European (GDPR Art. 6) and global privacy standards, we only process personal data where a recognized lawful basis exists:

Processing ActivityData CategoriesLawful Basis
Responding to inquiries & technical scopingName, email, company, project requirementsLegitimate Interests / Pre-contractual
Delivery of software engineering contractsCode repositories, specs, communicationsPerformance of a Contract
Tax, statutory compliance & corporate invoicingInvoicing addresses, tax IDs, banking receiptsLegal Obligation Compliance
Edge defense, DDoS prevention & site uptimeIP address, request headers, error tracesLegitimate Interests (Cybersecurity)
[SEC-05]

Cookies & Local Storage Practices

SOUDIV upholds a lean, privacy-first technical footprint. We do NOT use invasive advertising cookies or third-party behavioral profiling mechanisms.

Strictly Necessary UI StorageLOCAL_STORAGE ONLY

Key: soudiv-theme

Purpose: Stores your active visual theme selection ("dark" or "light") locally inside your browser to prevent distracting page flashes upon navigation.

Data Shared: None. This value is never transmitted across the network or synced to our backend servers.

You can clear or inspect your browser's local storage at any time via your browser's Developer Tools or Privacy Settings without impacting your ability to browse our services.

[SEC-06]

Data Sharing & Sub-processors

No Sale of Personal Data: SOUDIV has never sold, rented, leased, or monetized any personal information or client intelligence to third parties, and we maintain a strict perpetual pledge never to do so.

We share data solely with vetted enterprise infrastructure providers bound by statutory Data Processing Agreements (DPAs) and confidentiality terms:

Edge CDN & Hosting Infrastructure

Tier-1 cloud infrastructure providers that host our compiled web bundles, terminate TLS encryption, and mitigate DDoS traffic globally.

Corporate Email Communications

Google Workspace enterprise infrastructure for encrypted email exchange, calendar scheduling, and consultation communications.

We may disclose information if required to do so by a valid subpoena, court order, or applicable national security regulation, providing prompt notice to affected clients where legally permissible.

[SEC-07]

Security Architecture & Encryption

We implement defence-in-depth security engineering designed to protect systems from unauthorized interception, modification, or exposure:

TLS 1.3 in Transit

All web sessions, API endpoints, and data transmissions enforce modern TLS 1.3 with Perfect Forward Secrecy (PFS).

Least Privilege & MFA

Strict Role-Based Access Control (RBAC) and hardware-backed multi-factor authentication enforced across developer environments.

Tenant Isolation

Client repositories, testing environments, and staging VPCs are strictly segregated with zero cross-tenant resource contamination.

[SEC-08]

Retention & Secure Disposal

We adhere to data minimization principles and retain data only for periods justified by legitimate commercial or statutory requirements:

  • Prospective Inquiries: Contact form submissions that do not mature into commercial engagements are automatically purged within 18 months of last communication.
  • Active Client Engagements: Commercial project records, delivery manifests, and correspondence are retained for the duration of the engagement plus 7 years to satisfy statutory tax, accounting, and legal audit requirements.
  • Network Edge Logs: Ephemeral server access logs cycle on rolling 30-to-90-day retention policies before cryptographic destruction.
[SEC-09]

Your Statutory Privacy Rights

Depending on your geographic jurisdiction (GDPR, CCPA/CPRA, India DPDP Act), you possess enforceable statutory rights regarding your personal data:

Right of Access & Portability
Request a full copy of personal records held by SOUDIV in a portable, machine-readable format.
Right to Erasure (“To Be Forgotten”)
Request complete deletion of your records where ongoing statutory retention is not mandated by law.
Right to Rectification
Demand immediate correction of inaccurate or incomplete contact details and engagement parameters.
Right to Object & Non-Discrimination
Object to specific processing activities. Exercising your privacy rights will never result in altered service pricing or degraded quality.
Exercising Your Rights:

To exercise any statutory privacy entitlement, send a formal request to info@soudiv.com. We verify the identity of the requester to prevent unauthorized disclosures and respond within 30 calendar days without charge.

[SEC-10]

Cross-Border Transfers & Children's Privacy

Global Engineering Delivery: SOUDIV operates globally. Where cross-border data transfers occur, we implement European Commission-approved Standard Contractual Clauses (SCCs) and rigorous technical safeguards to ensure an equivalent level of protection regardless of physical geographic territory.

Protection of Minors: SOUDIV platforms, services, and software are exclusively directed toward corporate organizations, professionals, and developers aged 18 and older. We do not knowingly solicit or collect data from individuals under the age of 18. If we discover inadvertent receipt of minor data, we purge it immediately.

[SEC-11]

Policy Modifications & Version History

We review and update this Privacy Policy periodically to reflect engineering enhancements, evolving product capabilities, and statutory updates. Material changes will be reflected via an updated effective date at the top of this document. Continued engagement with our services after revisions constitutes acknowledgment of the updated terms.

[SEC-12]

Contact & Data Protection Officer

If you have inquiries, audit requests, or questions regarding our data sovereignty policies, please contact our data protection officer directly:

Official Compliance Email
info@soudiv.com
SLA: Response within 24–48 hours
Operating Entity
SOUDIV Technologies
Software Engineering, AI Systems & NIRIKSH