Privacy Policy
Effective Date: November 2026 • Last Updated: November 2026
Auroraa Sentinel Private Limited (“Auroraa”, “we”, “our”, or “us”) is an AI & automation company building trust infrastructure for the AI era. We provide forensic document intelligence, sensory verification, and autonomous workflow solutions. This Privacy Policy details our unwavering commitment to data sovereignty, enterprise encryption, and zero data leakage.
1. Core Privacy Commitment & Zero-Retention Policy
Our enterprise architecture is built on a zero-trust model. We believe business documents, financial ledgers, and applicant identities belong exclusively to the sovereign enterprise processing them.
- Zero Model Training: Under no circumstance are customer documents, extraction outputs, or verified metadata used to train, refine, or fine-tune public or third-party foundation models.
- Zero Data Retention (Stateless API): For customers electing our Zero-Retention tier, raw file bytes are held strictly in memory during processing and wiped immediately upon generation of the forensic JSON payload.
- Air-Gapped & On-Premise Deployment: Customers with strict statutory or defense-grade mandates can deploy Auroraa entirely within their sovereign private clouds (AWS/GCP/Azure VPC) or on-premises server environments with zero egress.
2. Information We Collect
Depending on how you interact with our websites, APIs, or enterprise services, we may process:
A. Information You Voluntarily Provide
Contact details (name, corporate email, phone number, organization name, job title) submitted via contact forms, briefing requests, or email inquiries to auroraa@auroraa.in.
B. Enterprise Ingestion Data (Processed on Your Behalf)
Files and documents submitted by authorized enterprise clients via our APIs or dashboard for forensic authentication (e.g., invoices, bank statements, salary slips, land deeds). We process this data strictly as a Data Processor pursuant to our enterprise Master Services Agreement (MSA).
C. Telemetry & System Logs
API performance metrics, latency timings, anonymized error traces, and request hashes required to maintain uptime and prevent denial-of-service disruptions.
3. Cryptographic Security Standards
Auroraa enforces industry-leading cryptographic safeguards across every stage of ingestion, inference, and telemetry transmission:
4. Statutory Compliance & DPDP Act Adherence
We comply with the Digital Personal Data Protection Act, 2023 (DPDP Act, India), the Information Technology Act, 2000, and guidelines issued by the Reserve Bank of India (RBI) concerning digital lending and customer onboarding integrity.
Enterprise clients maintain full data controller authority. Auroraa facilitates immediate deletion requests, data export payloads, and audit certificate issuance upon written request.
5. Third-Party Disclosures & Sub-Processors
We do not sell, rent, monetize, or broker personal or corporate data. We do not integrate tracking cookies or behavioral advertising trackers on enterprise portals. Any infrastructure hosting partners (e.g., AWS India MeitY-empaneled regions) are bound by strict non-disclosure, ISO 27001, and SOC-2 Type II standards.
6. Contact the Data Protection Officer (DPO)
For questions regarding this policy, security audit reviews, enterprise NDAs, or exercising data rights, please contact our security team directly: