1. DATA ARCHITECTURE & OPERATIONAL PRACTICES

Vectixore LTD engineers software solutions, on-device redaction applications (Doxudel), forensic verification toolchains, and privacy-preserving utilities. Our operational architecture is grounded strictly in Data Minimization, On-Device Computing, and Zero-Knowledge design paradigms.

1.1. On-Device Redaction & File Processing (Doxudel Desktop)

When using our on-device sanitization software (Doxudel):

• Local Execution: Document parsing (PDF, DOCX, XLSX, images), OCR processing, and Named Entity Recognition (on-device local NER) occur completely within client hardware RAM and local storage.
• Zero Cloud Transmission: File contents, PII entities, and processed redactions are never transmitted, buffered, or stored on external Vectixore infrastructure.
• Telemetry & Diagnostics: Strictly anonymous crash reports or diagnostic signals are collected only with explicit user opt-in and contain zero personal identifiers or document content.

1.2. Handwritten Signature Capture & Sealing

Where digital document execution services are invoked, we process vector paths (stroke data) and visual rasterizations of signatures input by the user.

• Purpose: Processed strictly as user-supplied document payloads embedded within target PDF/binary containers.
• Scope: Vectixore LTD does not perform behavioral graphology or unauthorized biometric pressure profiling on this input; it is cryptographically bound into the resultant payload.

1.3. Cryptographic Verification & Tamper Detection

• Presence & Anti-Spoofing: When executing certified digital transactions, visual match feeds or device sensor checks are evaluated strictly for active authorization integrity.
• Local Biometric Signals: When device-level biometrics (TouchID, FaceID, Windows Hello) are used to authorize document sealing, processing is handled locally by the OS Secure Element. Vectixore LTD receives only boolean success/failure cryptographic tokens, never raw biometric templates.

1.4. SHA-256 Audit Registry & Immutability

We maintain an immutable registry of mathematical SHA-256 digests (cryptographic hashes) alongside trusted UTC timestamps for sealed records.

• Mathematical Nature: A hash digest is a one-way mathematical function; raw document contents cannot be reverse-engineered or extracted from our registry.
• Integrity: Serves as verifiable mathematical proof of document existence and integrity at a specific historical moment.

1.5. Network, System Integrity & Client Telemetry

• Connection Metadata: IP addresses and system timestamps are logged during server operations strictly for security monitoring, DDoS mitigation, and rate limiting.
• Environment Attestation: To preserve security boundaries, device integrity signals are processed prior to executing cryptographic operations.
• Diagnostics: Application performance, crash logs, and non-identifying telemetry are processed through secure telemetry infrastructure to ensure enterprise stability.

1.6. Controller & Processor Demarcation

• Vectixore LTD as Controller: Governs licensing systems, account portals, and direct diagnostic security telemetry.
• User as Controller / Vectixore as Technology Provider: You remain the absolute data controller for all documents, records, and personal data processed locally or sealed using our desktop software suites.

2. GLOBAL DATA SUBJECT RIGHTS & COMPLIANCE

In accordance with the UK GDPR, EU GDPR and international data privacy statutes, users maintain clear statutory rights regarding their personal records:

• Right to Access: The right to obtain confirmation and copies of personal data maintained in active systems.
• Right to Rectification: The right to amend inaccurate identity or administrative records.
• Right to Erasure: The right to request data deletion, subject to overriding statutory requirements.
• Right to Restriction & Objection: The right to halt specific automated processing or profiling.

2.1. Inquiries & Data Subject Access Requests (DSAR)

To exercise statutory rights or query data governance procedures, submit formal requests to:

• Email: info@vectixore.com
• Subject: "Legal / Data Subject Access Request"
• Response Window: Processed within 30 calendar days.

DATA DELETION REQUESTS

Enterprise clients and software users may request account termination and purging of non-immutable registration data at any time.

3. COOKIE & LOCAL STORAGE NOTIFICATION

Vectixore LTD utilizes local storage tokens, session identifiers, and CSRF protection headers strictly necessary for secure authentication, administrative state persistence, and platform operation. We do not sell tracking cookies or provide user data to third-party ad brokers.