Privacy Policy & Data Protection

Our Core Data Privacy Pledge:

FINDUID is an enterprise consulting and bespoke systems engineering practice. We do not sell, rent, monetize, or broker customer data to third parties under any circumstances. We never train public or third-party artificial intelligence models on your proprietary financial transactions, timesheet records, or employee databases.

1. Regulatory Compliance Framework

FINDUID Technologies and its affiliated entities ("FINDUID", "we", "us", or "our") operate in strict adherence with global data protection standards, including:

European Union General Data Protection Regulation (EU GDPR 2016/679)
Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020
UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL)
California Consumer Privacy Act (CCPA / CPRA)

2. Roles: Data Processor vs. Data Controller

A. FINDUID as Data Processor: For all data ingested into client-deployed ERP instances, Timesheet Studio databases, subledger feeds, and banking webhooks, the client remains the sole Data Controller. FINDUID acts solely as a Data Processor executing services strictly in accordance with the signed Master Services Agreement (MSA).

B. FINDUID as Data Controller: FINDUID acts as a Data Controller only for basic business contact details submitted voluntarily via our website inquiry forms, audit questionnaires, or phone conversations (e.g., name, work email, phone number, and company name).

3. Data We Collect & Process

We process the following categories of information strictly to provide engineering and consulting services:

Inquiry & Contact Telemetry: Professional contact details provided for enterprise consultations or free business process audits.
Custom ERP Operational Data: Timesheet hour logs, project scope codes, billing milestone deliverables, and ledger transactions processed exclusively within your isolated cloud environment.
Technical Diagnostics: Server access logs, API latency metrics, and cryptographic error traces used strictly for system performance upkeep.

4. Cryptographic Security & Storage Standards

All data processed by our systems is protected using military-grade security controls:

Encryption at Rest: All databases, disk volumes, and backups are encrypted using AES-256.
Encryption in Transit: All HTTP endpoints and API webhooks enforce Transport Layer Security (TLS 1.3) with perfect forward secrecy.
Tenant Isolation: Every client ERP system is deployed in a logically isolated virtual private cloud (VPC) with dedicated schemas and zero cross-tenant data pooling.

5. Data Retention & The Right to Erasure

You retain full sovereignty over your enterprise data. Upon termination of maintenance or upon written request, FINDUID will provide a complete cryptographic archive of your data schemas and permanently expunge all client copies within 30 days, furnishing a signed Certificate of Erasure.

6. Contacting the Data Protection Officer (DPO)

If you have questions regarding this policy or wish to exercise statutory privacy rights, contact our Data Protection Office:

Data Protection Officer • FINDUID Enterprise Advisory

Email: dpo@finduid.app / enquiry@finduid.app

Direct Telephone: +91 7042894645