Privacy Policy

At Lagariya Labs, we respect your privacy and are committed to protecting corporate and personal data. This Privacy Policy details our operational data handling, compliance standards, and our zero-data retention architecture for enterprise automation pipelines.

1. Information We Collect

We collect information provided directly to us during enterprise project discovery, technical scoping, or formal business inquiries. This includes stakeholder names, corporate email addresses, company entity names, system architecture requirements, and project specifications.

We use this data solely to evaluate technical feasibility, formulate Statements of Work (SOW), execute milestone agreements, and maintain direct client communication. We do not sell, license, or broker your organizational or personal data to third parties.

2. Enterprise Data Ingestion & Ephemeral Storage (Vision & Document OCR)

When Lagariya Labs deploys document intake engines (such as passport MRZ parsers, visa application extractors, and logistics bill-of-lading readers), all payload data is processed strictly under an Ephemeral RAM-Only Pipeline:

• Zero Persistent Storage (0% Retention): Ingested images and binary document payloads processed via Gemini 2.5 Flash / multimodal vision models are stored only in volatile server memory (RAM) for the duration of inference (< 2 seconds).
• Instant Purge: Once structured JSON data is extracted and transmitted to the client's authenticated webhook or database endpoint, the memory buffer is wiped immediately. Neither raw images nor derived personal records are stored on intermediate servers.
• No Model Training: Client document payloads and customer records are never used to train, fine-tune, or evaluate machine learning models.

3. Regulatory Compliance: UAE PDPL & EU GDPR

Our systems and engineering methodologies are designed to adhere to international data privacy frameworks, including the UAE Federal Decree-Law No. 45/2021 on Personal Data Protection (PDPL) and the European Union General Data Protection Regulation (EU GDPR). We enforce end-to-end TLS 1.3 encryption in transit, strict RBAC credential partitioning, and client data sovereignty.

4. Mobile Systems & Local-First Database Architecture

Our native Android software applications (e.g., Tractor Pro and Expiry Alert Pro) are architected on an offline-first foundation. Field operational records, inventory balances, and equipment logs reside encrypted on the client's physical device using SQLite/Room. Remote cloud synchronization only occurs when explicitly configured with customer-owned database instances.

5. Cookies & Technical Telemetry

Our public marketing website uses minimal, privacy-centric telemetry to measure technical performance, uptime, and navigation latency. We do not employ third-party cross-site advertising trackers or surveillance scripts.

6. Data Inquiries & Security Desk

For compliance inquiries, data protection impact assessments (DPIA), or enterprise security audits, contact our engineering desk directly at: privacy@lagariyalabs.com or rahul@lagariyalabs.com.