Privacy Policy &
Data Protection Standards.

2. Interpretations & Definitions

For the purposes of this Privacy Policy:

• Account: A unique identity credential established for accessing our services or parts thereof.
• Company: Refers to Oakstree, based in Kanpur, Uttar Pradesh, India.
• Device: Any hardware interface capable of accessing our platforms, including desktop workstations, tablets, and smartphones.
• Personal Data: Any information relating to an identified or identifiable natural person.
• Service: Refers to our websites, web applications, cloud infrastructure, and mobile applications.
• Usage Data: Telemetry and performance data collected automatically, such as response latency, browser versions, and error reports.

3. Data We Collect

A. Information Provided Voluntarily

When you create an account, request a consultation, or interact with our platforms, we may collect:

• Business contact details (Full Name, Business Email Address, Phone Number, Organization Name)
• Account credentials (usernames and cryptographically salted password hashes)
• Billing and transaction metadata (processed via PCI-DSS compliant payment gateways)

B. Automatically Collected Usage Telemetry

To maintain our 99.99% uptime SLA, our servers collect anonymized diagnostic telemetry, including IP addresses, operating system types, browser engines, sub-millisecond API response durations, and error stack traces.

4. How We Use Information

Oakstree utilizes collected information strictly for legitimate operational purposes:

• Service Provision: Maintaining, monitoring, and optimizing platform performance.
• Account Governance: Authenticating users and enforcing role-based access permissions.
• Security & Fraud Prevention: Detecting anomalous logins, preventing brute-force attacks, and securing cryptographic audit logs.
• Direct Communication: Sending critical security advisories, transactional updates, and roadmap releases.
• Legal Compliance: Meeting applicable regulatory requirements under Indian and international law.

5. Sharing & Disclosures

We do not sell, rent, or trade your personal data. We disclose information only under the following limited circumstances:

• Infrastructure Providers: Trusted cloud partners (such as AWS and transactional SMS/Email relays) bound by strict confidentiality agreements.
• Legal Mandates: Where required by valid subpoenas, court orders, or applicable statutory mandates.
• Corporate Transfers: In connection with any merger or sale of company assets, with advance notice provided to affected users.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes set out in this policy, maintain active customer agreements, and satisfy statutory tax or legal requirements. When an account is terminated, data is permanently scrubbed or irreversibly anonymized in accordance with our deletion timelines.

7. International Transfers

Your information is processed at our operating facilities in India and within Tier-3/Tier-4 cloud data centers in compliance with standard contractual clauses and applicable cross-border data transfer regulations.

8. Your Rights & Deletion

You maintain full sovereignty over your personal data. You are entitled to:

• Request access to all personal data held about your account.
• Request correction of inaccurate or incomplete records.
• Request permanent erasure of your personal data ("Right to be Forgotten").
• Export your data in standard machine-readable formats (JSON/CSV).

To exercise any of these rights, contact our Data Governance Desk at privacy@oakstree.com.

9. Security Architecture

Oakstree enforces multi-layered technical safeguards:

• End-to-end data encryption in transit via TLS 1.3.
• AES-256 GCM encryption at rest for databases and xDrive vaults.
• Zero-knowledge biometric gate architecture in our Authenticator application.
• Cryptographic tamper-evident hash chaining in DocSign workflows.
• Routine vulnerability scanning and dependency audit automation.

10. Children's Privacy

Our enterprise services are not targeted to individuals under 13 years of age. Our mobile puzzle games comply with Google Play Families policy and COPPA regulations, collecting no personally identifiable information from underage players.