Global Privacy Policy
At Aurenix Technologies Inc. (“Aurenix”, “we”, “us”, or “our”), privacy and security are not compliance checkboxes—they are core architectural tenets. This policy explains how we collect, safeguard, and process telemetry and inquiry data across aurenixtechnologies.com in accordance with GDPR, CCPA, and OWASP Top 10 standards.
01. Executive Overview & Zero Data Selling
Aurenix Technologies Inc. provides enterprise-grade Cybersecurity as a Service (CaaS), Software as a Service (SaaS), and Infrastructure as a Service (IaaS). We recognize the sensitivity of the technical data entrusted to us.
We do not sell, rent, lease, trade, or monetize your personal information, corporate details, or operational telemetry to advertisers, commercial data aggregators, or unauthorized third parties under any circumstances.
02. Information We Collect
We collect information through two distinct mechanisms: direct voluntary submission and automated operational telemetry.
A. Information You Voluntarily Provide
When you contact an engineer, submit an inquiry, or request service scoping through our portal, we collect:
- Full Name & Identity: To personalize correspondence and establish engagement context.
- Business or Individual Email Address: Used strictly for operational replies and statement-of-work (SOW) delivery.
- Company Name (Optional): Corporate identity for enterprise infrastructure scoping.
- Phone Number (Optional): For direct technical consultation or urgent incident triage.
- Project Scoping & Requirements: Architectural specifications, target budget tier, and timeline parameters.
B. Automated Operational Telemetry
To defend our infrastructure against distributed denial-of-service (DDoS) attacks, brute-force intrusions, and API exploits, our edge servers automatically record operational metadata conforming to OWASP Cheat Sheet Series guidelines:
| Telemetry Parameter | Technical Purpose | Anonymization Treatment |
|---|---|---|
| Client IP Address | DDoS mitigation, rate limiting, and SIEM intrusion alerting. | Salted SHA-256 Hash |
| Request URI & HTTP Method | WAF payload inspection, path traversal prevention. | Sanitized Path Only |
| HTTP User-Agent | Browser family and OS detection for rendering optimization. | Standard Header |
| TLS Cipher & Protocol | Enforce TLS 1.3 cryptographic handshake compliance. | Cryptographic Metadata |
| Correlation Request ID | Trace ID for end-to-end debugging and SOC incident review. | UUID v4 Token |
03. 5-Layer Telemetry Architecture & Client Diagnostics
Aurenix operates a multi-layer diagnostic engine to maintain planetary uptime and sub-14ms P99 wire-speed guarantees:
Measures incoming endpoint latencies, request execution durations, and HTTP response codes.
Collects Time-To-First-Byte (TTFB), DOM Interactive timings, and sanitized JavaScript exception traces. Stack traces are automatically scrubbed of sensitive URL parameters, authorization tokens, and credentials prior to ingestion.
Analyzes incoming payloads for SQL injection patterns (' OR 1=1), cross-site scripting (XSS), directory traversal (../), and prototype pollution. Suspicious payloads trigger an immediate 403 Forbidden with security incident audit logging.
Performs passive, non-prompting queries via the Permissions API (navigator.permissions.query) to audit browser permission state (Camera, Microphone, Location, Notifications) for zero-trust posture. We never record audio, capture video, or access media hardware without explicit user action.
05. Legal Bases for Processing (GDPR Article 6)
Under the European Union General Data Protection Regulation (GDPR) and UK GDPR, our lawful processing bases include:
- Legitimate Interests (Art. 6(1)(f)): Protecting our digital infrastructure from cyberattacks, zero-day CVE exploitation, malicious bot traffic, and unauthorized intrusion attempts.
- Contractual Performance (Art. 6(1)(b)): Reviewing technical specifications, formulating proposals, and fulfilling client contracts.
- Explicit Consent (Art. 6(1)(a)): For optional performance telemetry and preference cookies collected via our consent banner.
- Legal Obligation (Art. 6(1)(c)): Maintaining audit records for statutory security, tax, and compliance obligations.
06. Security Architecture & OWASP Hardening
Aurenix applies defense-in-depth principles across the entire application stack:
Restricts script, frame, and object injection vectors.
Enforces TLS 1.3 with 2-year max-age and preload directives.
Eliminates timing side-channel attacks on authentication tokens.
Blocks IPs after 5 failed authentication attempts for 15 minutes.
07. Data Retention & Purge Schedules
We do not retain information longer than necessary for legitimate operational and compliance requirements:
- Contact & Scoping Inquiries: Retained for the duration of the commercial engagement or purged upon verified deletion request.
- Access Telemetry Logs: Stored on a rolling 30-day purge schedule.
- Security SIEM Logs: Retained for 90 days in immutable tamper-evident storage for forensic incident analysis.
08. Your Rights Under GDPR & CCPA
Depending on your jurisdiction, you have the following rights regarding your personal information:
Request a full copy of all records associated with your inquiry or identity.
Demand permanent deletion of your inquiry data and associated logs.
Correct any inaccurate or obsolete contact and corporate information.
Opt out of non-essential telemetry or processing at any time without penalty.
09. Contact & Data Protection Officer (DPO)
For privacy inquiries, Subject Access Requests (SAR), or data deletion petitions, contact our Data Protection Officer: