Privacy Policy
GDPR & DPDP ActLast updated: September 20, 2026 • Effective Immediately
Our Zero-Persistence Promise to Travel Agents & Developers
Ephemeral RAMWhen you submit a PNR text string to our conversion API (or stream voice packets across AppZone Dial), payloads are parsed strictly in-memory (RAM) to generate structured JSON / connect SIP streams and are immediately discarded. We never store, log, sell, or index passenger names, ticket records, credit card numbers, or itinerary details in any database.
1. Information We Collect
We collect only the essential information needed to provision enterprise developer accounts, deliver requested cloud engineering services, and protect API credentials:
Registered username, verified corporate email address, and securely salted bcrypt password hashes.
Timestamp of API invocations, origin IP address, and User-Agent headers to detect credential leaks and unauthorized access.
Transaction reference IDs, plan tiers, and GSTIN registration numbers. Payment card details are handled by PCI-DSS compliant gateways.
2. How We Use Your Data
AppZone operates under strict purpose limitation principles. Data is utilized exclusively for:
- Authenticating API requests and validating active JWT sessions.
- Calculating real-time quota balances and enforcing rate-limiting safeguards.
- Delivering critical infrastructure notifications, quota warnings, and security alerts.
- Executing bespoke software engineering contracts and technical support requests.
3. Data Retention & Permanent Erasure
You maintain total sovereignty over your personal data. You may request complete account deletion, credential revocation, and log sanitization at any moment.
Upon receiving an erasure request via privacy@appzone.in, all associated telemetry and database records will be permanently purged within 7 business days.
4. International Transfers & Global Compliance
All infrastructure communication enforces TLS 1.3 in transit with perfect forward secrecy and AES-256 encryption at rest.
Full adherence to Articles 15 through 22, guaranteeing rights to access, rectification, portability, and forgotten status.
Compliant with the Digital Personal Data Protection Act, enforcing explicit consent frameworks and local data safety rules.
5. Contact Our Data Protection Officer (DPO)
For privacy compliance audits, regulatory inquiries, or immediate data export requests, reach out directly to our privacy desk: