Data & Privacy Policy

At Belkar Engineering, we enforce strict data sovereignty and security engineering standards. This policy explains how we process personal data, authenticate user sessions in the client portal, manage essential cookies, utilize secure cloud infrastructure (Supabase), deploy sovereign AI solutions, and process payments via authorized third-party providers.

1. Data Collection & Authentication

We collect and process minimal data strictly necessary to deliver business engineering advisory, process diagnostics, and secure portal access:

• User Authentication & Profiles: When you register or sign in to the client portal (via Supabase Auth), we store your email address, full name, encrypted credentials, and transaction/order history records.
• Operational Diagnostics, Questionnaires & Scoping Data: Information submitted via the qualification terminal, diagnostic assessments (8-Waste Process Analysis and AiQ Benchmark), or during Phase 1 diagnostic sprints and SOW scoping is processed strictly to quantify operational drag, identify bottlenecks, and calculate reclaimed work hours.
• Transaction Records & Invoicing: When booking diagnostic sprints or commissioning bespoke process engineering engagements (SOW), secure transaction metadata (payment provider transaction ID, SOW reference, and amounts) is logged in compliance with accounting regulations.

2. Cookies & User Session Architecture

We implement functional and analytical cookies under strict privacy parameters:

• Authentication & Session Cookies: Secure, encrypted session cookies (with SameSite=Lax and Secure flags) allow authenticated users to navigate the client portal and dashboard seamlessly without repeated logins across pages.
• Google Analytics Cookies: We use Google tag (gtag.js / G-C548GV8P38) to analyze anonymous aggregated visitor interaction metrics. You can opt out or disable analytics cookies in your browser settings at any time without affecting application performance.
• Zero Third-Party Advertising Trackers: We do not deploy cross-site marketing pixels, behavioral retargeting scripts, or third-party ad network tracking cookies.

3. Infrastructure, Databases & AI Tool Processing

To provide high-availability systems, we work with enterprise-grade data processors adhering to strict security protocols:

• Database & Authentication Infrastructure (Supabase): User accounts, order ledgers, and access records are managed on isolated Supabase cloud databases with Row-Level Security (RLS) policies.
• Third-Party Payment Gateways: Payments are processed via PCI-DSS Level 1 compliant third-party payment providers (including Morning / Green Invoice). Belkar Engineering never stores or transmits raw credit card numbers on our servers.
• AI Guardrails & Sovereign Processing: Artificial intelligence models integrated into our engineering solutions operate under sovereign architecture, local/on-premise deployments, or dedicated enterprise API endpoints. Client proprietary data, business documents, and trade records are never shared with or used to train public foundation models.

4. Your Privacy Rights & Data Sovereignty

• No Data Brokering: We will never sell, rent, or trade your personal or business data to third-party advertisers or data brokers.
• Right of Erasure & Export: You hold the right to request a full export or permanent deletion of your profile and operational history. Contact us at aaron@aaronbelkar.com to initiate a data wipe.
• Zero Hostage & Full Portability: All process maps, workflow code, documentation, and credentials delivered during our engagements are 100% owned by the client.

5. Regulatory Compliance

This policy complies with:

• The Israeli Privacy Protection Law, 5741-1981 and Amendment 13 regulations
• EU General Data Protection Regulation (GDPR)
• CAN-SPAM Act & International Data Transfer Standards

6. Contact Information

For all data-related inquiries, audits, or privacy requests:

This policy is updated periodically to match evolving AI security guardrails and legal requirements.

← RETURN TO SOVEREIGN ROOT