Data Confidentiality

1. What We Keep Confidential

Everything you share with us in the course of a project engagement is treated as confidential, including but not limited to:

• Source code, repositories, and proprietary software
• Business documents, product roadmaps, and strategy decks
• API keys, credentials, secrets, and system access details
• AI prompts, fine-tuned models, and training datasets
• Architecture diagrams, infrastructure configurations, and system designs
• Internal communications, meeting notes, and project briefs
• Financial data, customer lists, and business metrics
• Any other information marked confidential or that is obviously proprietary in nature

2. What We Will Never Do

• Sell, license, or transfer your data or code to any third party
• Use your data to train or fine-tune public or shared AI models without your explicit written approval
• Disclose your project details, technical architecture, or business information publicly
• Share access credentials or system access beyond the authorized personnel assigned to your project
• Retain copies of client data beyond the engagement period, unless legally required or you request otherwise

3. Access Controls

We operate on a strict need-to-know basis:

• Access to client systems, repositories, and data is granted only to engineers directly assigned to your project
• All team members sign internal confidentiality agreements as a condition of employment
• Access is revoked immediately upon project completion or team changes
• We use role-based access controls and audit logs for all production system access
• Temporary credentials are rotated and deleted upon project offboarding

4. Secure Development Practices

• Code is worked on in isolated, access-controlled development environments
• All data in transit is encrypted via TLS/HTTPS
• Sensitive credentials are stored using secret management tools — never in plain text or version control
• We do not fork, clone, or retain client repositories beyond the agreed project scope
• Security incidents (if any) are disclosed to the client promptly and transparently

5. AI & Model Usage Policy

6. Intellectual Property

Unless otherwise agreed in writing, all custom software, code, designs, and deliverables created specifically for you under a paid engagement are assigned to you upon full payment. Purics AI does not retain ownership or licensing rights over client-specific work product.

We may retain rights to general-purpose tooling, frameworks, or libraries we develop independently that are not specific to your project — these are always negotiated transparently before project start.

7. Non-Disclosure Agreements (NDAs)

8. Data Retention & Deletion

• Client data is retained only for the duration of the active engagement plus a reasonable handover period (typically 30 days after project close)
• Upon written request, we will securely delete or return all client data and confirm deletion in writing
• Backups containing client data are purged on the same schedule

9. Reporting a Concern

If you believe your confidential information has been mishandled or you have a privacy concern, please contact us immediately:

We aim to acknowledge all security or confidentiality concerns within 24 hours.