Privacy Policy

1. Introduction & Organizational Commitment

At Hillasian Tech Solutions ("Hillasian", "we", "us", or "our"), safeguarding your digital sovereignty, intellectual property, and personal data is central to our engineering philosophy. We operate as an elite, next-generation AI and software development powerhouse, designing high-throughput SaaS systems, autonomous agentic workflows, and tailored enterprise cloud software.

This Privacy Policy explains how we collect, process, store, encrypt, and handle information gathered when you visit our website, utilize our SaaS products (including Interviewly), interact with our project cost estimation engines, submit career applications, or engage our engineering teams.

Operational Model: Hillasian operates as a 100% Remote, Hybrid Distributed Collective with decentralized engineering nodes across Chandigarh, Noida, Bengaluru, and Manali. We do not operate walk-in physical reception facilities or public branch desks. All communications and official correspondence are conducted securely via digital email channels.

2. Information We Collect

We only collect data necessary to provide high-caliber engineering services, process commercial proposals, assess recruitment talent, and maintain operational stability.

A. Direct Information Provided by You

Inquiry & Project Scoping Data: Your name, corporate email address, organization name, target delivery budget, timeline requirements, and project architectural specifications submitted via our Contact and Scope Estimator modules.
Career & Candidate Data: Resume/CV files, professional portfolio links (GitHub, LinkedIn), employment history, technical competencies, and compensation requirements submitted via our Careers portal.
Commercial & Contractual Data: Billing entity details, GSTIN/Tax IDs, statement of work sign-offs, and administrative contact emails.

B. Automated Telemetry & Technical Signals

System Telemetry: Anonymized browser signatures, device architecture, operating system metadata, network latency logs, and aggregated page engagement metrics.
Session State: Cryptographically signed session tokens and security tokens used solely for CSRF defense and authentication verification.

3. Artificial Intelligence & Proprietary Data Shield

Hillasian upholds a strict Zero-Data-Retention and Non-Harvesting AI policy:

Client Code & Models: Client proprietary source code, internal schemas, dataset embeddings, and strategic documentation submitted to Hillasian are strictly segregated within dedicated, sandboxed environments.
No Foundation Model Training: We never use client proprietary data, internal codebases, or commercial confidential information to train or fine-tune public foundation models (e.g., OpenAI, Anthropic, or open-source community checkpoints).
Inference Isolation: Any AI inference pipeline deployed for our clients operates through private VPC endpoints or enterprise agreements guaranteeing zero prompt retention.

4. Legal Grounds for Processing

We process personal and organizational data under recognized international standards, including:

Contractual Necessity: Delivering software development milestones, executing Statements of Work (SOW), and fulfilling subscription service agreements.
Consent: Freely given by you when submitting contact inquiries, subscribing to tech insight briefings, or applying for open engineering positions.
Statutory & Legal Obligations: Complying with fiscal reporting, corporate tax statutes, and Indian data protection directives including the Digital Personal Data Protection Act (DPDP Act 2023).
Legitimate Engineering Interests: Protecting our infrastructure against Distributed Denial of Service (DDoS) attacks, brute-force exploits, and unauthorized penetration.

5. Data Storage, Security & Zero-Trust Architecture

We enforce enterprise-grade security protocols aligned with SOC-2 and ISO/IEC 27001 paradigms:

Encryption Standards: All data in transit is protected using TLS 1.3 cryptographic handshakes. Data at rest is encrypted using AES-256 block ciphers.
Multi-Region Redundancy: Operational databases reside in secure, ISO-certified Tier-IV cloud data centers with automated point-in-time recovery (PITR) and real-time cross-availability-zone failover.
Access Control: Hillasian adheres strictly to the principle of least privilege (PoLP) and role-based access control (RBAC). No employee or contractor is granted persistent database access without multi-factor authorization and audit trail logging.

Hillasian does not sell, rent, broker, or trade personal or business data to advertisers or third-party data aggregators. Data is shared exclusively with vetted technical infrastructure sub-processors:

Cloud Hosting & Compute: Amazon Web Services (AWS) and DigitalOcean for isolated VPC infrastructure.
Transactional Delivery: Secure SMTP transport gateways for automated transactional alerts and client dispatching.
Security & DDoS Mitigation: Cloudflare for edge caching, DNSSEC resolution, and Web Application Firewall (WAF) filtering.

7. Your Statutory Data Rights

Depending on your geographic jurisdiction (such as India under DPDP Act 2023, the European Union / United Kingdom under GDPR, or California under CCPA/CPRA), you possess the following rights:

Right to Access: Request a machine-readable copy of any personal records we retain concerning you.
Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
Right to Erasure ("Right to Be Forgotten"): Request permanent deletion of your inquiry or candidate data, subject to statutory accounting retention obligations.
Right to Withdraw Consent: Revoke consent for direct informational communications at any time.

8. Data Retention Schedule

Project Inquiries & Cost Estimates: Retained for up to twenty-four (24) months to facilitate ongoing architectural scoping and historical context, after which records are purged.
Candidate Applications & Resumes: Retained for twelve (12) months following recruitment cycles for future relevant opportunities, unless immediate removal is requested.
Financial & Contractual Records: Retained for seven (7) years in compliance with statutory corporate taxation requirements.

9. Regulatory Contact & Data Protection Officer

For questions regarding this policy, to exercise your data rights, or to submit a compliance inquiry:

Entity: Hillasian Tech Solutions
Email Contact: contact@hillasian.com
Security & Privacy Desk: security@hillasian.com
Operating Model: 100% Remote Hybrid Operations (Nodes: Chandigarh · Noida · Bengaluru · Manali)
Notice on Contact Channels: Hillasian conducts all official correspondence exclusively through verified corporate email addresses (@hillasian.com). We do not maintain telephone helplines or unsolicited messaging channels.