Privacy Policy

Operance Labs ("we," "our," or "us") operates as a premier software engineering atelier specializing in high-performance web systems, distributed cloud infrastructure, and autonomous AI agents. This Privacy Policy details our strict standards regarding how client data, inquiry communications, and telemetry are collected, processed, and securely retained.

Our legal headquarters is located at 471, AR Mall, Surat - 394105, Gujarat, India. Optional website measurement is enabled only after you allow it through the measurement notice. Submitting an enquiry lets us use the supplied information to respond to your request.

We strictly limit information collection to what is necessary to evaluate, scope, and execute engineering engagements:

• Direct Inquiries: Name, work email address, company affiliation, and project scope details submitted via our contact terminal or direct founder communication.
• Technical Metadata: Minimal HTTP request telemetry (IP address, browser user-agent, referrers, and diagnostic timestamps) required to maintain server reliability, DDOS mitigation, and security integrity.
• Optional Measurement: If you allow it, Google Analytics receives visit and traffic-source information and enquiry-success events. We do not add form names, email addresses or messages to analytics events. You can withdraw permission through Cookie settings in the footer.
• Engagement Materials: Architecture schemas, API credentials, and repository access provided under explicit bilateral Non-Disclosure Agreements (NDAs).

As engineers building frontier AI agent systems, we enforce a strict Zero-Training Mandate:

• No client code, proprietary business logic, document stores, or database records are ever used to train public, open, or third-party foundation models.
• All AI pipeline integrations utilize enterprise API contracts featuring zero-retention policies, ensuring prompt inputs and outputs are discarded immediately after inference.
• Model fine-tuning and retrieval-augmented generation (RAG) vector embeddings are isolated within dedicated single-tenant client VPC boundaries.

Collected information is utilized solely for:

• Responding to inbound technical inquiries and scoping system feasibility within our 24-hour SLA.
• Drafting Statements of Work (SOW), master service agreements, and mutual NDAs.
• Maintaining security perimeter logging and defending our web infrastructure against automated abuse.
• Compliance with statutory tax, corporate, and legal obligations under Indian law.

We partner exclusively with tier-1 enterprise infrastructure providers that comply with SOC 2 Type II, ISO 27001, and GDPR standards:

• Vercel & Cloudflare: Edge CDN routing, global TLS termination, and serverless compute hosting.
• Google Cloud Platform (GCP) & AWS: Isolated production compute, storage, and automated build pipelines.
• Google Analytics: Optional website and advertising measurement after permission. Personalised advertising and Google signals are disabled. See Google’s privacy policy.
• Transactional Mail: Encrypted enterprise email gateways for direct client correspondence.

Inquiry details are retained only for the duration of the scoping evaluation or the life of the active engagement. Upon project completion or request, all sandbox credentials, temporary repositories, and auxiliary assets are purged within 30 days.

All data in transit is protected using TLS 1.3 encryption, and data at rest is encrypted using AES-256 standards with hardware-backed key rotation.

Depending on your jurisdiction (including GDPR, CCPA, and India's Digital Personal Data Protection Act), you have the right to request access, correction, export, or deletion of your personal data held by Operance Labs.

To exercise your rights or request an audit of your data footprint, contact our founders directly at contact@operancelabs.com.