Comprehensive Privacy Policy

1. Overview & Introduction

Welcome to Testiy. This platform is operated by ARK Tech & Logistics("we", "our", "us"). We are an independent technology and compliance auditing firm specializing in the forensic verification of travel and financial documents.

We recognize the highly sensitive nature of the information you upload to our platform. This Comprehensive Privacy Policy outlines our strict protocols regarding the collection, processing, storage, and mandatory deletion of your personal and financial data. By accessing our portal and utilizing our audit services, you consent to the practices described in this document.

2. The Information We Collect

To execute our verification services, we must collect specific data points. We operate on a principle of data minimization, collecting only what is strictly required to deliver your Risk Analysis Report.

• Forensic Document Data: Files you explicitly upload for review. This includes, but is not limited to, scanned passports, bank statements, employment contracts, flight itineraries (PNR), hotel bookings, and tax returns.
• Identity & Contact Information: Your full name, email address, and phone number provided during the checkout or submission process.
• Financial & Transactional Data: We process payments through secure, PCI-DSS compliant third-party gateways (e.g., Razorpay, Stripe). We do not view, collect, or store your raw credit card numbers or bank authentication credentials on our servers.
• Technical Logging Data: Standard server logs, including your IP address, browser type, operating system, and timestamps of your upload. This is used exclusively to prevent DDOS attacks and unauthorized system access.

3. Legal Basis & Purpose of Processing

We process your data under the following legal frameworks and operational necessities:

• Service Execution: Utilizing proprietary Optical Character Recognition (OCR) and metadata extraction algorithms to audit your documents for digital tampering, logic errors, and compliance failures.
• Communication: Delivering your final verification certificate, alerting you of critical forensic failures, and providing customer support.
• Fraud Prevention: Ensuring our platform is not being utilized by malicious actors to launder fake documents or bypass international security protocols.

4. Strict Zero Data Retention Protocol

Unlike traditional agencies that archive your personal files, Testiy enforces a ruthless Zero Data Retention Policy to protect you from data breaches.

• Immediate Post-Audit Deletion: The moment your Risk Analysis Report is generated and emailed to you, all uploaded source files (JPEGs, PDFs) are permanently purged from our active processing servers.
• No Archival Backups: We do not keep cold-storage backups of your passports or bank statements. If you lose your audit report, you will need to re-upload your documents.
• Metadata Wiping: We retain only anonymized, aggregate metadata (e.g., "1 file audited on June 26") for accounting and system performance metrics. All personally identifiable markers are destroyed.

5. Third-Party Sharing & Disclosures

We do not sell, rent, or lease your data to marketers, immigration agencies, or data brokers. We share data only with essential infrastructure partners under strict confidentiality agreements:

• Payment Processors: Gateways like Razorpay handle your transaction securely. They are bound by PCI-DSS regulations.
• Cloud Infrastructure: Our secure servers and AI processing engines temporarily handle your data within isolated, encrypted environments during the active audit phase.
• Legal Compliance: We reserve the right to disclose logging data if explicitly required by a valid, legally binding court order or international law enforcement request regarding severe financial fraud or human trafficking.

6. Security Infrastructure

We deploy enterprise-grade security measures to protect your documents while they are in transit and during the temporary processing window:

• In-Transit Encryption: All data transfers between your browser and our servers are secured using TLS 1.3 cryptographic protocols.
• At-Rest Encryption: Any temporary storage utilizes AES-256 encryption.
• Access Control: Only authorized senior compliance officers have access to the manual review queues.

7. Your User Rights

Depending on your jurisdiction (including the GDPR for European users), you maintain absolute control over your digital footprint. You possess the right to:

• Request Access: Obtain confirmation of what limited metadata we currently hold.
• Demand Erasure (Right to be Forgotten): While your files are deleted automatically, you may request the immediate deletion of your email address and account history from our billing system.
• Lodge a Complaint: Report operational concerns to your local data protection authority.

8. Policy Modifications

We reserve the right to update this Privacy Policy to reflect changes in our technology, legal requirements, or payment gateway compliance standards. Any significant updates will be communicated clearly on this page. Continued use of our portal following an update constitutes your acceptance of the revised terms.

9. Official Contact Information

For any questions, deletion requests, or compliance inquiries regarding this Privacy Policy, please contact our Data Protection Officer (DPO) directly: