PRIVACY POLICY

Zetameld’s core architecture operates on a strict single-tenant logical boundary model. Every database shard, object storage bucket, and memory cache is provisioned with cryptographically unique tenant IDs.

No cross-tenant data pollination is theoretically or architecturally possible. Our internal microservice mesh strictly forbids queries spanning tenant namespaces, and automated continuous compliance monitors verify separation boundaries at every deployment.

We will never sell, rent, license, or trade your enterprise data, user profiles, or behavioral signals to third-party data brokers, advertising syndicates, or commercial crawlers.

Our business model is pure subscription-based software-as-a-service. You pay for software; you are never the product. We do not inject behavioral ad trackers, third-party pixel beacons, or tracking SDKs across our authenticated workspaces.

Your data remains active only as long as your tenant contract or account subscription is active. Upon account deactivation or tenant termination:

• 30-Day Export Grace: You retain complete self-serve API access to download complete JSON/CSV exports and storage archives of all tenant data.
• Cryptographic Shredding: On day 31 following termination, tenant encryption keys (AES-256-GCM) are permanently revoked and scrubbed from our Hardware Security Modules (HSMs), rendering all existing cold backups mathematically unrecoverable.
• Statutory Financial Records: Tax invoices, statutory payment logs, and compliance records are retained for the statutory period required by jurisdiction (typically 7 years).

Zetameld partners exclusively with Tier-IV data centers and cloud hyperscalers that maintain SOC 2 Type II, ISO 27001, and FedRAMP accreditations (AWS, Google Cloud, and Cloudflare).

All subprocessors are bound by enterprise Data Processing Agreements (DPAs) featuring Standard Contractual Clauses (SCCs) that mandate equivalent or superior security controls. Customers may subscribe to our Subprocessor Notification RSS feed to receive 30-day prior notices of any infrastructure changes.

Pursuant to global data protection frameworks (including the EU GDPR, UK GDPR, and India Digital Personal Data Protection Act), Zetameld has appointed a dedicated Data Protection Officer (DPO) and Grievance Officer.

If you have questions regarding this policy, desire to exercise your rights of rectification or erasure, or seek escalation on privacy matters, contact our office directly: