Data minimization protocol
SutraCore adheres to a strict "zero-knowledge" philosophy where possible. We do not collect personal data unless explicitly required for the execution of a contract (e.g. billing details, deployment credentials).
Information we collect
- Contact information — name, email, and company details provided via forms.
- Technical data — server credentials (SSH keys, API tokens) provided strictly for deployment, purged 48 hours after handover.
- Usage data — anonymized analytics about website traffic (minimal cookies).
How we use your data
- Execute purchased deployment and build services.
- Communicate project updates.
- Issue invoices and legal documentation.
Data security
All sensitive credentials are encrypted using AES-256 before storage and transmitted via TLS 1.3. Access to client secrets is restricted to the architect assigned to your project.
Third-party disclosures
We do not sell, trade, or transfer your data to outside parties. This excludes trusted processors like Stripe (payments) and cloud providers (AWS, Vercel) strictly for fulfilling your order.
Your rights
You may request a full data export or deletion ("right to be forgotten") at any time by contacting support@sutracore.com.
Questions about your data? Contact privacy@sutracore.com.