Privacy & Data Sovereignty Policy

DIVINE SAINIK (“Company”, “we”, “our”) adheres to national sovereignty doctrines. In all operational installations:

• No External Egress: The software operates in physically disconnected networks with zero public internet connectivity. It requires no external cloud handshake to infer, track, or verify alarms.
• Customer Data Sovereignty: Video recordings, spatial bounding boxes, PTZ kinematic logs, and thermal coordinates remain under the exclusive physical and cryptographic ownership of the customer organization.
• Zero Analytics Harvesting: We do not collect telemetry, diagnostic dumps, or usage analytics from deployed customer nodes.

Our edge pipeline employs a zero-copy deterministic memory ring architecture designed to protect physical privacy:

DIVINE SAINIK complies fully with the statutory mandates of the Digital Personal Data Protection Act, 2023 (DPDPA 2023) and the Information Technology Act, 2000 (including reasonable security practices rules):

• Data Processor Role: For deployed edge systems, the customer acts as the Data Fiduciary. DIVINE SAINIK acts strictly as a technology provider and Data Processor executing on customer-owned infrastructure.
• Legitimate Use for Critical Defense: Real-time perimeter threat detection operates under legitimate interest provisions for physical infrastructure security and national asset protection.
• Zero Cross-Border Transfers: All data generated remains strictly within the sovereign territory of the Republic of India.

DIVINE SAINIK algorithms focus primarily on spatial-temporal object kinematics—such as tripwire breach, loitering vectors, vehicle speed, weapon detection, and thermal contrast—rather than mass public biometric identification.

Where facial re-identification is enabled for authorized access control checkpoints:

• Embeddings are mathematical vectors (not raw facial photos) stored with AES-256 encryption.
• No centralized biometric registry is built or maintained by DIVINE SAINIK.
• Vector matching happens exclusively against localized, customer-curated access lists.

When you interact with divinesainik.com or register via our Operator Sign Up Portal, we collect:

• Professional identity details (Full Name, Official Organization/Defense Entity).
• Direct contact credentials (Corporate/Official Email, Phone Number).
• Operational parameters (Target deployment sector, stream density, air-gapped requirements).

This information is utilized solely to evaluate technical feasibility, verify institutional clearance, and coordinate non-disclosure agreements.

Internal system communications on customer local networks are protected by defense-grade encryption standards:

In compliance with DPDPA 2023, operators and organizations whose contact details reside in our customer briefing registry possess the right to:

• Request a summary of personal and institutional data processed by our registry.
• Request correction, completion, or updating of inaccurate operator records.
• Request erasure of non-statutory communication records upon termination of PoC engagements.
• Seek prompt grievance redressal through our designated Data Protection Officer.

Customer organizations retain autonomous control over retention windows. Edge appliances can be configured for: (a) zero-retention ephemeral inference; (b) FIFO rolling 7-day or 30-day encrypted buffers; or (c) permanent immutable alarm archiving with SHA-256 digital watermarks.