Privacy Policy & Data Sovereignty

At Adviting Digital Technologies ("we", "our", or "us"), safeguarding client confidentiality and securing sensitive business datasets is central to our engineering architecture. This Privacy Policy details our protocols for handling information collected through our website (advitingdigital.com), our enterprise software architectures, proprietary contact center operating systems (Adviting CallCRM), institutional ERPs (Adviting EduCampus), algorithmic engines, and private enterprise Artificial Intelligence (RAG) deployments.

1. Scope of Enterprise Services & Systems

This policy governs data privacy across our core software engineering disciplines and turnkey software intellectual property:

• Custom Web & Cloud Platforms: High-concurrency web applications, microservices, RESTful/GraphQL APIs, and enterprise cloud portals.
• Enterprise Mobility: Native (Swift, Kotlin) and cross-platform (Flutter, React Native) mobile applications with encrypted offline SQLite storage.
• Adviting CallCRM: Contact center PBX operating systems, Asterisk telephony pipelines, predictive dialers, and automated lead telemetry.
• Adviting EduCampus ERP: Multi-branch institutional suites managing student records, fee collections, biometric RFID attendance, and parent communication channels.
• Enterprise AI & Autonomous Workflow Orchestration: Private document retrieval augmented generation (RAG), vector embeddings, multi-LLM smart routers, and 24/7 conversational agents.
• Algorithmic Fintech Engines: Quantitative execution pipelines, low-latency financial APIs, and order telemetry.

2. Enterprise AI & Zero-Data Retention Guarantee

We enforce strict privacy-first guardrails for all generative AI, vector search, and automated workflows:

• Zero Public Model Training: Your internal corporate documents (PDFs, manuals, SOPs, legal contracts, and financial spreadsheets) ingested into our RAG systems are never submitted to public LLMs for model training or weight adjustments.
• Private Vector Databases: All document embeddings are hosted in isolated private vector stores (pgvector, ChromaDB, or private cloud VPC clusters) guarded by strict Role-Based Access Control (RBAC).
• On-Premise & Air-Gapped Deployments: For institutions with strict data sovereignty mandates, we deploy local, open-weights models (Ollama, vLLM, DeepSeek, Llama) entirely on your dedicated hardware without external internet API dependencies.
• WhatsApp & Conversational AI Telemetry: Inquiries processed by conversational bots are encrypted and synchronized exclusively into your company's CRM database.

3. Data Handling in Dedicated Systems (CallCRM & EduCampus)

When clients deploy our proprietary turnkey software systems:

• Data Sovereignty: Software instances are deployed on client-owned virtual private servers (AWS, DigitalOcean, Hetzner, or on-premise hardware). Adviting Digital Technologies does not maintain centralized backdoors or unauthorized access to client databases.
• VoIP Audio & Call Recordings: Audio files captured via Asterisk PBX are saved directly to the client's encrypted block storage. Recordings are never routed to third-party marketing services.
• Student & Financial Records: In EduCampus ERP, student personal identifiers, grade transcripts, biometric attendance punches, and fee transactions remain the sole property of the licensed institution.

4. Information Collected via Our Website

When you visit or interact with our web portal, we may collect the following:

• Technical Consultation & Proposal Inquiries: Name, work email address, telephone/WhatsApp number, organization name, current technical stack, and software specifications submitted via our architecture request forms.
• AI Chatbot Telemetry: User questions, service interests, and contact coordinates voluntarily shared during conversational interactions.
• Diagnostic & Performance Logs: Browser user-agent, operating system, IP address, and anonymized page latency metrics to prevent DDoS attacks and optimize cloud delivery.

5. Data Storage, Encryption & Security Standards

We apply bank-grade security protocols across all software implementations:

• Data in Transit: All web traffic and API endpoints are enforced with Transport Layer Security (TLS 1.3 / HTTPS) with HTTP Strict Transport Security (HSTS).
• Data at Rest: Sensitive credentials, API secrets, and server backups are encrypted using AES-256 standard encryption.
• OWASP Hardening: Our codebases undergo rigorous static analysis to prevent SQL injection, cross-site scripting (XSS), CSRF, and broken access controls.

6. Regulatory Compliance (GDPR & DPDP Act 2023)

We comply with international data privacy standards, including the European Union General Data Protection Regulation (GDPR) and the Digital Personal Data Protection Act (DPDP Act 2023, India). As a data subject or authorized organizational representative, you have the right to:

• Right to Access: Request a comprehensive copy of all personal and organizational records held in our direct custody.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated business records.
• Right to Erasure ("Right to be Forgotten"): Request permanent purging of contact records from our sales databases, subject to statutory tax and contract retention obligations.
• Right to Data Portability: Receive your data in a structured, machine-readable format (JSON, CSV).
• Right to Restrict or Object to Processing: Withdraw consent for non-essential communications or direct notifications at any time.

7. Non-Disclosure & Third-Party Sharing

Adviting Digital Technologies does not sell, lease, barter, or trade client information or business contact details to advertising networks or third-party data aggregators. Data is shared exclusively under the following strict conditions:

• Infrastructure Vendors: Trusted cloud compute providers (e.g., AWS, Razorpay for payment processing, SMTP relays) strictly necessary to fulfill technical service contracts.
• Statutory & Legal Requirements: If compelled by lawful court orders, regulatory warrants, or law enforcement under applicable Indian jurisdiction.

8. Children's Privacy Protection

Our website and enterprise software platforms are strictly engineered for commercial organizations, educational administrators, and business operators. We do not knowingly solicit or collect data from individuals under the age of 18 without verified parental or educational institutional consent.

9. Policy Amendments

We may periodically update this Enterprise Privacy Policy to reflect advancements in AI data governance, system security protocols, or statutory regulations. Any material changes will be published on this page with an updated revision date.

10. Grievance Officer & Contact Information

For inquiries regarding this Privacy Policy, enterprise data sovereignty, or to exercise your GDPR/DPDP rights, please direct your communication to our Data Protection & Compliance Officer: