Back to Home
Data Protection

Privacy Policy

Last Updated: July 2026

1. Secure Encryption of Database Credentials

For developers using **Option B (Execution Mode)**, any database connection URLs and password credentials you store in the client portal are **fully encrypted at rest on the server** using advanced Advanced Encryption Standard (**AES-256-GCM**) cipher keys.

  • Decryption keys are maintained exclusively in secure server-side environment variables.
  • Plaintext database credentials are never stored on disk, never cached, and never exposed in logs or diagnostics outputs.
  • Decryption occurs purely in temporary server memory during gateway query execution and is immediately garbage-collected.

2. Zero Data Retention on Query Payload Rows

AdminZero enforces a strict **Zero Retention Policy** on all database payload query results retrieved during full execution.

  • Database row values returned from your query are held transiently in server RAM only while filtering/applying PII redaction.
  • The payload rows are immediately discarded once the response is sent back to your client backend.
  • We do not record, store, or cache your private customer database data rows to persistent disk storage.

3. Security Telemetry & Log Auditing

To provide developers with the **Threat Interception Console**, the AdminZero gateway writes metadata logs to your workspace database for every query transaction:

What is logged: Timestamp, Query Latency (ms), SQL Query Length, Blocked Status, and Target Threat Category (e.g. DML block, Prompt Injection block, PII Scrubbed count).

What is NEVER logged: Plaintext raw database values, cell payloads, user passwords, or decrypted credentials.

4. AI Engines & LLM Subprocessors

Natural language query translation utilizes **Google Gemini 2.5 Flash** enterprise APIs.

  • Prompts and database schemas passed to Google Gemini are sent via secure TLS/HTTPS channels.
  • Under Google GenAI enterprise agreements, prompts and query context are not logged, stored, or used for model training.

5. Payment Verification Scan Auditing

To automate credit top-ups, we process uploaded transaction receipt screenshots using **Gemini AI Vision models**. Receipt files are read transiently in memory to match transaction UTR, verify amounts, and are permanently deleted immediately after validation. No payment receipt images are retained or archived on disk.

6. Data Rights & Contact

You can view, download, or revoke your data and API credentials instantly from your dashboard. If you have any inquiries about our security architecture or wish to request data purging, please contact us at teamglitchgo@gmail.com.