Privacy Policy

1. Information We Collect

At Cyber Warrior ("we", "us", or "our"), we collect personal and enterprise technical data required to execute web engineering, cloud deployment, and cybersecurity consulting services:

• Identity Data: Full name, corporate email address, contact phone number, company name, and designation.
• Technical & System Data: IP address, browser telemetry, system logs, session data, and infrastructure metadata submitted during technical audits or consultation requests.
• Billing Data: GST number, corporate billing address, and transaction records (financial payment information is directly processed by RBI-authorized payment gateways and is not stored on our servers).

2. Purpose of Data Processing

We process your data strictly under the following legal grounds and specific business requirements:

• Fulfilling Master Service Agreements (MSAs), Statements of Work (SOWs), and web development deliverables.
• Executing vulnerability assessments, security audits, and SOC operations with explicit client authorization.
• Issuing GST-compliant invoices and maintaining financial auditing compliance under Indian Tax Laws.
• Communicating critical system updates, technical advisories, and security alerts.

3. Data Sharing & Third-Party Services

We do not sell, rent, or trade your personal or corporate data to third parties. Data is shared exclusively with:

• Cloud Infrastructure Providers: AWS, Microsoft Azure, and Cloudflare (subject to strict Data Processing Agreements & NDAs).
• Payment Processors: RBI-licensed payment gateways (e.g., Razorpay, Paytm) for transaction execution.
• Legal & Regulatory Authorities: When mandated by Indian Law Enforcement agencies or court orders under applicable legal frameworks.

4. Data Security & Storage

We implement military-grade technical and organizational safeguards including AES-256 encryption at rest, TLS 1.3 transit encryption, strict Role-Based Access Controls (RBAC), and continuous threat monitoring. All primary databases are hosted in secure Tier-IV data centers within India.

5. Your Data Protection Rights

Under the DPDP Act 2023, you retain the following rights regarding your personal data:

• Right to access an itemized summary of personal data being processed.
• Right to request correction, completion, or erasure of outdated or inaccurate personal data.
• Right to nominate an individual to exercise rights in the event of incapacity.
• Right to withdraw consent at any time for non-essential processing activities.

6. Grievance Redressal Officer

In accordance with the Information Technology Act 2000 and DPDP Rules, the details of our Grievance Officer are as follows: