Enterprise Data Privacy & Security Governance

Privacy Policy & Data Protection

At Nabik AI, trust and confidentiality form the cornerstone of our enterprise software solutions. This document details our commitment to protecting corporate data, zero-retention AI processing, and multi-tenant security architecture.

Last Updated: October 20, 2026•Version: 4.2.0 (SOC 2 & ISO 27001 Aligned)•Jurisdiction: Global & Bangladesh

Section 1

Executive Summary & Scope

This Privacy Policy applies to all enterprise platforms, applications, APIs, AI agents, and custom technological services offered by Nabik AI Solutions Inc. ("Nabik AI", "we", "us", or "our").

Our software portfolio includes cloud Enterprise Resource Planning (ERP), Customer Relationship Management (CRM), Specialized Industry Software (Garments Export ERP, Manufacturing Assembly ERP, School Management SIS), and the 9 Autonomous AI Workforce Agents.

Core Privacy Tenet:

You retain 100% legal ownership of your business data. Nabik AI acts strictly as a data processor on your behalf. We do not sell, rent, monetize, or publicly distribute your customer lists, sales figures, inventory metrics, or confidential business documentation.

Section 2

Categories of Information We Collect

In order to configure and operate your cloud enterprise software environment, we collect and process the following categories of data:

Account & Entity Details

Corporate legal name, billing contact email, official address, registered Tax BIN/VAT identification, and authorized representative credentials.

Enterprise Operating Records

Work orders, invoices, chart of accounts, employee attendance records, production bills of materials (BOM), and sales lead pipelines.

AI Workforce Telemetry

Prompt instructions, automated workflow trigger conditions, agent task outputs, response speed metrics, and completion statuses.

Infrastructure Logs

IP addresses, browser client fingerprints, API tokens, response latency timestamps, and cryptographic session cookies for authentication.

Section 3

Strict AI Privacy & Zero-Model Training Policy

Zero Customer Data Model Training Guarantee

Under no circumstances does Nabik AI use customer private financial ledgers, inventory counts, ERP databases, or internal team communications to train, retrain, or improve public machine learning models (such as commercial LLMs).

Prompts submitted to AI Agents are processed in ephemeral memory and discarded after inference.
Fine-tuned weights created under Custom Enterprise contracts remain isolated strictly to your dedicated tenant cluster.
No cross-tenant data pollination or leakage between corporate accounts.

Section 4

How We Process & Use Customer Data

We process your data strictly to fulfill our contractual and legal obligations:

Service Provisioning: Hosting multi-tenant database clusters, rendering interactive dashboard UIs, and syncing multi-branch operations.
Payment & Invoice Clearance: Generating official BDT (৳) invoices, tracking partial milestone installments, verifying bank wire transfers, and VAT compliance.
Security Auditing & Threat Defense: Detecting brute-force authentication attacks, unauthorized API token queries, and zero-day intrusion attempts.
Customer Success & Support: Addressing client tickets submitted via official channels (`[email protected]` or phone).

Section 5

Tenant Database Isolation & Encryption

Every enterprise customer on Nabik AI operates inside a compartmentalized security envelope:

Encryption In Transit:

All web traffic and REST APIs enforce TLS 1.3 with Perfect Forward Secrecy (PFS) and HTTP Strict Transport Security (HSTS).

Encryption At Rest:

All PostgreSQL database volumes, document stores, and backup archives are encrypted using military-grade AES-256 bit keys managed through Cloud KMS.

Row-Level Security (RLS):

Database tables employ hardware-enforced Row-Level Security verifying tenant identity tokens before any read or write transaction executes.

Section 6

Data Retention, Backups & Deletion

We retain client operational data for the duration of the active subscription agreement. Automated encrypted snapshots are preserved for 30 days to facilitate disaster recovery and audit reconciliation.

Right to Total Purge upon Termination:

Upon written contract cancellation, your tenant database is completely wiped from active primary nodes within 7 days, and irrevocably purged from all backup archives within 30 days. Prior to deletion, you may download a full SQL and JSON export of all your business records.

Section 7

Customer Legal Rights & Data Portability

Organizations and their authorized users possess fundamental data sovereignty rights:

Right to Export: Export invoices, customer databases, and product inventories at any time in open CSV, Excel, or JSON formats.
Right to Correction: Update corporate signatory information, tax BINs, and billing addresses directly inside the Admin Settings console.
Audit Logs Inspection: View full forensic timestamps of user logins, IP addresses, and records created.

Section 8

Data Protection Officer (DPO) & Legal Inquiries

For inquiries regarding enterprise compliance, Data Processing Agreements, or security audits, contact our dedicated legal governance team:

Nabik AI Legal & Compliance Office

Privacy & Legal Email:

[email protected]

Direct Hotline:

+8801814914095

Headquarters:

Level 14, Lotus Kamal Tower, Gulshan Avenue, Dhaka-1212, Bangladesh