Privacy Policy

1. Scope of This Policy

This Policy applies to all visitors, clients, partners, and enterprise stakeholders interacting with NIBRAS INFOTECH services, including:

• Custom enterprise web and mobile software development (.NET Core, React, Next.js).
• Artificial Intelligence integrations, LLM workflows, and private RAG vector pipelines.
• Healthcare portal engineering compliant with HL7 FHIR protocols.
• Cloud modernization, container orchestration (Docker, Kubernetes), and DevOps automation.
• Our primary web domain at nibrasinfotech.com and related inquiry endpoints.

2. Information We Collect

We collect only the minimal data required to scope, architect, deliver, and support enterprise technology contracts:

3. AI & LLM Data Protection Commitment

All vector embeddings, RAG pipelines, and agent reasoning loops are orchestrated within private tenant sandboxes utilizing enterprise zero-retention API endpoints.

4. Healthcare Data & HL7 FHIR Standards

When developing clinical portals, diagnostic management software, or healthcare interoperability engines:

• We adhere to Fast Healthcare Interoperability Resources (HL7 FHIR Release 4 & Release 5) standards.
• Synthetic and de-identified data records are strictly used for staging, QA, and automated test environments.
• Protected Health Information (PHI) is isolated using hardware-backed encryption keys and role-based access control (RBAC).

5. Security Architecture & Encryption

We implement comprehensive defensive security controls to safeguard customer information:

• Encryption in Transit: All HTTP interactions enforce TLS 1.3 with automated HSTS headers and modern cipher suites.
• Encryption at Rest: All stored database clusters and file archives are encrypted with AES-256 standard encryption.
• Zero-Trust Access: Engineering access to client deployment repositories requires multi-factor authentication (MFA) and granular SSH keys.
• Regular Vulnerability Audits: Continuous container vulnerability scans and automated dependency auditing via automated CI/CD workflows.

6. Information Sharing & Third-Party Infrastructure

We never sell, lease, or monetize client data. Information is disclosed solely to authorized service partners necessary to fulfill contracted infrastructure:

• Cloud Platforms: Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform for hosting and container execution.
• Network & CDN: Cloudflare for DDoS mitigation, DNS routing, and global edge caching.
• Legal Obligations: When strictly required by applicable courts of competent jurisdiction or statutory laws.

7. Client Rights & Data Control

Clients and individuals hold the following rights regarding their information:

• Right of Access: Request a complete summary of data held regarding your organization.
• Right to Rectification: Update or amend inaccurate records immediately.
• Right to Erasure: Request permanent deletion of scoping notes and contact records upon contract completion.
• Code & IP Handover: Upon commercial settlement, all project source code, repositories, and assets are fully transferred to the client.