CipherPod implements a zero-trust privacy framework using individual 256-bit cryptographic decryption keys (ShredKeys). Upon verified account deletion, your unique ShredKey is permanently destroyed. Without this key, all historical analytical and transaction logs stored in cloud archives become unreadable, irreversible mathematical noise—fulfilling your statutory Right to be Forgotten while maintaining immutable ledger integrity.
1. Data Fiduciary Status & Regulatory Scope
CipherPod is operated by ACE OF COSMOS prop., Sri Vijaya Puram, Andaman & Nicobar Islands, India. Under the Digital Personal Data Protection (DPDP) Act, 2023 (India), Regulation (EU) 2016/679 (GDPR), and the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), ACE OF COSMOS prop. serves as the designated Data Fiduciary (and Data Controller globally) for all information processed through the platform's mobile applications, web portals, and server infrastructure.
2. Categorization & Purpose of Personal Data Collection
To deliver automated digital media infrastructure, secure payment gateways, and community governance, CipherPod processes distinct categories of user information based on your account activity:
Account Authentication Credentials: Phone numbers verified via SMS multi-factor authentication, email addresses, unique handles (Cryptonames), and public avatar media.
Identity Verification & Biometric Data: Official government identification records (including Indian PAN card and Aadhaar documentation, or global national passport equivalents), live selfie feeds, 18+ age verification parameters, and real-time facial biometric scans.
Financial & Transactional Telemetry: In-app top-up reference tokens, payment gateway transaction identifiers (Google Play Billing, Razorpay), account balances tracked in Integer/Paise math (Deposit Wallet, Creator Treasury, Earned Revenue Ledger), payout bank/UPI details, and E-Studio procurement proposal voting logs.
User-Generated Media & Metadata: Short video recordings (up to 60 seconds), promotional media graphics, E-Production project proposals, brand collaboration communications, and regional discovery tags.
3. Sharded Sovereignty Model & Data Decoupling
Unlike centralized legacy applications, CipherPod isolates user information across independent, specialized database shards to prevent single points of failure and eliminate monolithic data leak surfaces:
User Identity Shard: Core authentication credentials, registration currency preferences, and private encryption keys (`ShredKeys`).
User Compliance Shard: Real-time KYC/AML verification status flags and account lock indicators.
User Wallets Shard: Isolated financial ledgers governed strictly by atomic integer arithmetic.
Public Profile Shard: Non-sensitive handles, ranks, and public avatars indexed for community discovery.
4. Automated AI Biometric Evaluation & Anti-Sybil Hashing
To access premium platform features, project creation, pass exchanges, and revenue withdrawals, users undergo automated identity verification:
AI Judge Evaluation: Live selfies and scanned government IDs are evaluated by automated Artificial Intelligence models ("AI Judge") to verify document authenticity, confirm legal age (18+), and perform facial biometric matching.
Zero-Waste Storage Purge: Unapproved, rejected, or incomplete face scans and document images are purged immediately upon decision to protect user privacy and eliminate storage bloat. Approved document records are stored in air-gapped, encrypted vault shards.
Cryptographic Document Hashing & Anti-Sybil Rules: Upon successful verification, the system generates an irreversible, salted cryptographic metadata hash (SHA-256) of your official identification numbers and biometric parameters. This hash is indexed in a global registry to enforce our one-account-per-person policy. Any attempt to register multiple profiles using duplicate biometric structures or document parameters results in immediate account freezing.
5. Payment Processing & Dual Gateway Architecture
Top-up conversions and payout disbursements are processed through specialized financial gateways:
Mobile Gateway (Global): Users worldwide convert funds into Cipher Credits via Google Play In-App Billing.
Web Gateway (India): Indian users convert funds into Cipher Credits by specifying custom deposit amounts processed via the Razorpay Payment Gateway.
Non-Refundable Deposit Credits: All converted top-up funds become non-refundable Cipher Credits held under a 48-hour maturity lock prior to project allocation. Deposit credits cannot be withdrawn or converted back to fiat currency.
Earned Revenue Withdrawals: Verified net earnings from secondary pass exchange, pay-per-view video unlocks, and brand collaborations are credited to your Earned Revenue Ledger and disbursed outward via authorized bank remittance networks.
6. Technological Subprocessors & Infrastructure API Disclosures
CipherPod routes data through trusted technological subprocessors operating under strict Data Processing Agreements (DPAs):
Google LLC (Firebase & Google Cloud): Provides Realtime Database hosting, authentication protocols, secure cloud storage, serverless Cloud Functions, and BigQuery analytical pipelines.
Cloudinary Ltd: Manages media delivery, video compression, and global Content Delivery Network (CDN) streaming.
Algolia Inc: Powers typo-tolerant search indexing for profiles and E-Production project discovery.
Generative AI Partners (RunwayML, Luma AI, Kling AI): Processes text/image prompts for E-Studio production tasks. Creative prompts are decoupled from your Identity Shard to preserve creative anonymity.
Amazon Fulfillment & PA-API: Manages physical equipment catalog searches and order fulfillment for project hardware proposals.
Razorpay & Google Play Billing: Handles payment processing and payment token verification.
7. BigQuery Dark Vault & Append-Only Ledger Retention
To satisfy statutory anti-money laundering (AML), tax reporting, and audit obligations under Sections 194S/194O of the Indian Income Tax Act and international tax treaties, all peer-to-peer transaction logs, wallet movements, and proposal voting records are committed to an immutable, append-only analytical warehouse (BigQuery Dark Vault). Historical transaction logs are retained for a statutory period of 7 years.
All sensitive transaction entries in BigQuery are encrypted using AES-256-GCM. When an account is deleted, the destruction of your unique `ShredKey` renders these historical audit logs unreadable mathematical noise, harmonizing statutory financial retention requirements with global privacy laws.
8. Proactive Machine Learning Frame Scanning
To ensure a safe digital ecosystem, inbound video uploads are subjected to mandatory real-time Machine Learning Frame Analysis prior to publication. This automated scanner inspects media streams for banned material, including explicit nudity, pornography, extreme graphic violence, terrorism, and illegal activities. Flagged uploads are automatically blocked at the gateway before publication.
9. Cross-Border Data Transfers
CipherPod operates a global digital infrastructure. By accessing the platform, personal data and media streams originating outside India may be transferred to, stored in, and processed across server nodes located within India and the United States. We implement Standard Contractual Clauses (SCCs) and enterprise-grade encryption to ensure cross-border data flows receive structural privacy protections equivalent to global standards.
10. Your Privacy Rights & Grievance Contact
Subject to local privacy legislation (DPDP Act, GDPR, CCPA), you hold the following rights regarding your personal data:
Right to Access & Export: Request a digital summary or CSV ledger export of your stored personal data and transaction history.
Right to Correction: Update or rectify incomplete or inaccurate profile details.
Right to Erasure (Atomic Account Deletion): Initiate complete account termination. Upon deletion, your identity shards are purged, your biometrics un-indexed, and your `ShredKey` destroyed.