PRIVACY PROTOCOL & ZERO-TRUST DATA ARCHITECTURE
Effective Date: September 2026 • Governs how personal telemetry, shipping addresses, and post-escrow contact dossiers are handled on Auraminator.in.
Auraminator enforces a strict zero-trust data minimization policy. We do NOT monetize user data, sell marketing lists, or store raw financial instruments (Credit/Debit Card numbers, CVVs, or NetBanking credentials). All banking and payment tokenization is handled directly by PCI-DSS Level 1 compliant gateway partners (Razorpay).
01.Information We Collect
- Identity & Profile: Full name, chosen username, avatar URL, and verified email address via Supabase Auth.
- Logistics & Delivery Telemetry: Shipping recipient name, contact phone number, postal PIN code, and street address (used strictly for Shiprocket / Delhivery courier manifest generation).
- Creator Verification (KYC): Legal business entity name, PAN / GSTIN registration, and payout settlement bank details stored securely for double-entry ledger disbursements.
- Digital Access Tokens: IP address and User Agent logged during presigned digital vault downloads to prevent unauthorized hotlinking.
02.Post-Payment Contact Detail Revelation Policy
In high-ticket turnkey asset transfers (SaaS, Mobile Apps, Social Accounts) and Tech Services:
- Prior to escrow funding, direct contact details are obscured to protect marketplace safety.
- Upon verified payment capture, the buyer's verified contact details (Phone/WhatsApp, Email, Full Name) are shared exclusively with the assigned seller to coordinate technical handover, developer setup, and mandatory 7-day warranty support.
- Both parties agree not to use shared contact information for external spam, harassment, or unauthorized commercial solicitations.
03.Data Storage & Cryptographic Security
All application data is housed in enterprise PostgreSQL clusters with Row Level Security (RLS) policies enabled. Digital assets hosted in private vaults utilize ephemeral 15-minute cryptographically signed tokens to prevent persistent exposure of raw storage URLs.
04.User Rights & Account Deletion
Users may request complete account data deletion or export by contacting the Master Admin at support@auraminator.in. Note that finalized transaction ledger entries are retained as required by financial auditing regulations.