Privacy Policy
How Infinitia Hub and AI Studio Craft govern, protect, and handle enterprise data, confidential client information, and omnichannel messaging payloads across WhatsApp Business API, Google RCS, and autonomous AI pipelines.
Policy Index
We never monetize, broker, or train public AI models on your private customer conversations or proprietary database data.
01Executive Overview & Scope
Infinitia Hub ("Company", "we", "us", or "our") provides high-performance enterprise digital systems, bespoke AI engineering, cloud microservice architectures, and our omnichannel communication platform AI Studio Craft (accessible at apps.aistudiocraft.in).
This Privacy Policy describes our practices regarding the collection, transmission, processing, storage, and safeguarding of information when you interact with our websites, software products, client APIs, webhooks, or engage our engineering teams for bespoke technology solutions.
02Information We Collect
We only collect data strictly necessary to provision enterprise software, maintain uninterrupted uptime, and execute contracted engineering deliverables:
Business name, authorized administrator contact information, corporate email, billing tax identifiers, and single-sign-on (SSO) authentication tokens.
Edge routing latency, HTTP status codes, API throughput quotas, rate-limiting tokens, error tracebacks, and client-side performance diagnostics.
03WhatsApp & RCS Carrier Data Handling
Meta Cloud API & Google RCS Strict Compliance
As an official technology provider for Meta WhatsApp Business Cloud API and Google RCS Business Messaging, Infinitia Hub acts strictly as a Data Processor under client instruction.
- Webhook Payload Routing: Inbound and outbound WhatsApp and RCS messages are parsed and routed directly to client-specified webhooks with end-to-end payload signature verification (HMAC SHA-256).
- Ephemeral Processing Option: Enterprise clients may configure zero-retention message buffers, ensuring conversational text is purged from volatile memory immediately after downstream webhook confirmation.
- Opt-In Verification: Clients must maintain verified opt-in records for all end-users in accordance with Meta and GSMA messaging guidelines.
04How We Process & Utilize Data
We process enterprise data solely for the following explicit business purposes:
- Provisioning, scaling, and maintaining 99.99% uptime of your AI Studio Craft workspace and dedicated edge microservices.
- Executing deterministic AI agent workflows and private vector search retrievals within isolated customer VPC boundaries.
- Processing secure invoice billing, usage metering, and transactional receipts.
- Responding to enterprise technical support inquiries and incident escalation tickets.
05Zero-Sale & Data Sovereignty Guarantee
Infinitia Hub does not sell, rent, broker, or monetize your corporate information, customer records, or conversational datasets. We do not use client data to train foundational or public AI models.
06Storage, Encryption & Retention
All data in transit is encrypted using modern TLS 1.3 protocols with perfect forward secrecy. All data at rest is secured via AES-256 hardware security modules (HSM).
Log records and audit trails are retained for 90 days for forensic anomaly detection and compliance verification, after which they are systematically purged via automated cryptographic shredding.
07Authorized Sub-processors & Infrastructure
To guarantee high availability and global sub-50ms latency, we partner exclusively with tier-1 enterprise cloud providers who comply with ISO 27001, SOC2, and GDPR standards:
| Sub-processor | Purpose | Data Location |
|---|---|---|
| Amazon Web Services (AWS) | Isolated VPC Cloud Compute, S3 Storage, KMS | US / EU / APAC Regions |
| Google Cloud Platform (GCP) | Kubernetes Engine, Vertex AI inference | Global Multi-Region |
| Cloudflare Inc. | Anycast Edge Proxy, WAF, DDoS mitigation | Global Edge Mesh (300+ PoPs) |
| Meta Platforms Inc. | WhatsApp Business Cloud API Gateway | Designated Meta Datacenters |
08Global Privacy Rights (GDPR / CCPA / DPDPA)
Regardless of your geography, we uphold universal data sovereignty principles. You and your authorized organization retain the right to:
09Data Protection Officer (DPO) Contact
For privacy inquiries, audit certifications, data processing agreements (DPA), or to execute your privacy rights, contact our legal and compliance office directly: