Privacy Policy & Data Safeguards
Effective Date: January 1, 2026 • Last Updated: October 27, 2026 • Version 3.2
1. Corporate Information & Data Fiduciary Role
CodeShield is owned and operated by Krishiv Consultancy (OPC) Private Limited, an incorporated entity registered under the Indian Companies Act, 2013 (CIN: U72900DL2023OPC412345). Under the Digital Personal Data Protection (DPDP) Act, 2023, Krishiv Consultancy acts as a Data Fiduciary regarding platform account data and a Data Processor regarding automated vulnerability scans.
2. Technical Information We Collect
- Target Perimeter Metadata: Domain names, public IP addresses, DNS records (A, AAAA, MX, TXT, CAA), and TLS certificate properties.
- Scan Telemetry: HTTP response headers, framework banners, and vulnerability evidence generated during automated probes.
- Account Credentials: Enterprise email addresses, hashed passwords (bcrypt/Argon2id), and role allocations.
- Audit Trail: Linear SHA-256 chained logs capturing scan initiation, domain verification, and findings remediation for non-repudiation.
3. Statutory Data Sovereignty & Storage
In strict accordance with CERT-In directions and DPDP Section 16, all vulnerability data, evidence artifacts, and user telemetry are processed and stored exclusively within Indian sovereign data centers (AWS ap-south-1 Mumbai / Hostinger India nodes). Data is encrypted at rest using AES-256 and in transit using TLS 1.3.
4. Data Principal Rights & Redressal
Under the DPDP Act 2023, you have the right to access, correct, or erase your corporate personal data. For grievances or inquiries, contact our Data Protection Officer (DPO) at ciso@krishiv.com.