HeritageOS Privacy Policy

Effective Date: June 30, 2026  |  Classification: Public Compliance Documentation

1. Statutory Compliance & Legal Frameworks

HeritageOS operates as a decentralized SaaS ecosystem. Hosted entirely on Google Cloud infrastructure, our framework maps data boundaries to satisfy:

• DPDP Act (India): Clear purpose limitation for digital ingestion.
• GDPR (EU): Data minimization and privacy-by-default.
• ADA/EAA: Assistive hardware tracking without privacy compromises.

2. Data Collection Modalities

2.1 App-Less End-Visitor Experience (Zero PII Harvesting)

The interactive mobile interpretation layer functions without registration or login scripts. HeritageOS does not harvest or store Personally Identifiable Information (PII) during standard guide usage.

3. Regional Data Sovereignty

We leverage Google Cloud Platform (GCP) regions to isolate data natively:

• APAC/India: Hosted in the asia-south1 (Mumbai) region.
• North America: Hosted in us-central1 (Iowa).

4. Transactional Ledgers & 24-Hour Scrubbing

Transactions (admissions/billing) are stored securely. To remove liability, our pipelines execute a destructive database mutation exactly 24 hours after the visit date:

5. System Architecture & Auto-Export

6. Administrative Access Control

Back-of-house dashboard access requires supervisor credentials. Every database modification logs the user session ID and input delta, ensuring a transparent audit trail.