Client Privacy Policy & Security Standards
Effective Date: September 1, 2026 • Version 2.4 • ISO/IEC 27001 & SOC2 Type II Aligned
Binary Froster provides high-concurrency bespoke engineering and AI infrastructure services to enterprise clients. We treat your proprietary source code, credentials, architecture designs, financial milestones, and sprint communications as strictly confidential trade secrets. We never sell, monetize, or train public AI models on client deliverables.
01. Data Collection Architecture
When accessing the Binary Froster Client Portal, we collect and store only the minimal operational information required to fulfill our development contracts and maintain service availability:
- Account Credentials: Name, business email address, role, and cryptographically hashed passwords.
- Project Telemetry: Task board progress, deliverable approval signatures, milestone tracking, and ticket exchanges.
- Credential Vault Data: API tokens and environment secrets provided by clients for project execution, encrypted at the field level with AES-256.
- Financial Ledger Data: Transaction references, invoice identifiers, and payment fulfillment status processed via Stripe or Razorpay.
02. Cryptographic Storage & Transit Security
All client information is safeguarded through defense-in-depth infrastructure protocols:
TLS 1.3 transport security with HSTS max-age enforcement (63,072,000s) and strict cipher suite restrictions.
Database volumes and encrypted backups are secured using AES-256 Galois/Counter Mode (GCM) with rotating master keys.
03. Role-Based Access Control & Data Isolation
Our multi-tenant architecture enforces strict data isolation at the middleware and database layer. External clients are cryptographically locked to their organization tenant ID. Client staff cannot view other organizations' contracts, tasks, proposals, or credentials under any circumstances.
04. GDPR & CCPA Client Rights
Under international privacy regulations (including the EU GDPR and California CCPA/CPRA), authorized client representatives possess full sovereignty over their enterprise data:
- Right of Access & Portability: Export complete project archives, activity logs, and invoices in structured JSON or CSV format.
- Right to Erasure: Upon formal project handover and contract termination, request immediate hard deletion of credential vault entries and auxiliary files.
- Right to Audit: Enterprise SLA clients may request SOC2 Type II audit summary packages under Mutual Non-Disclosure Agreement.
05. Contact Data Privacy Officer
For security disclosures, DPA requests, or privacy inquiries, contact our dedicated security team: