Trust & Compliance

Privacy Policy & Data Protection Charter

Zero-Trust security standards applied to visitor confidentiality, client deliverables, and transaction telemetry.

LAST AUDITED & EFFECTIVE: OCTOBER 2026

1. Administrative Overview & Controller Identification

This Platform is operated by SM SECURE STUDIO, under the direction of Sagar Majumdar (Principal Security Architect, Penetration Tester & Branch Head at CBCE HABRA), located in Habra, West Bengal, India.

As a professional cybersecurity consultancy and educational enterprise, zero-trust confidentiality is foundational to our operations. We never monetize, sell, lease, or distribute visitor or client data under any circumstances.

2. Information We Collect & Transmission Methods

We collect only the minimum telemetry strictly required to deliver security consulting services and communications:

  • Contact & Scope Specifications: When submitting an assessment brief via our contact form, we collect your Name, Secure Email, Subject, and Scope Specifications. This packet is encrypted in transit via TLS 1.3 and transmitted to our private administrative records and Web3Forms delivery relay.
  • UPI Transaction Reference (UTR) Numbers: For clients opting for direct 0% commission UPI settlement, we collect the user-provided 12-digit bank UTR reference code solely to cross-verify payment settlement with our banking records.
  • Client-Side Diagnostic Tools: Our interactive browser scanners (Privacy Detector, Perimeter Scanner, Wordlist Generator) execute purely within your local browser's JavaScript sandbox. No scanned target domain or generated candidate wordlist is transmitted to external surveillance databases.

3. Direct Peer-to-Peer Payment Security

All direct payments initiated through our UPI portal are executed peer-to-peer directly across the National Payments Corporation of India (NPCI) unified payment interface.

Our website never asks for, handles, intercepts, or stores card numbers, CVVs, expiry dates, or banking passwords. All payments settle immediately between your chosen banking application (Google Pay, PhonePe, Paytm, BHIM, Cred) and our verified business account (6296600565-2@ybl).

4. Cookies & Local Analytics

SM SECURE STUDIO does not employ third-party advertising cookies, cross-site pixel trackers, or commercial data broker scripts. We employ only standard functional browser sessions required for security header validation (CSP, HSTS) and local UI preferences.

5. Non-Disclosure & Security Audit Confidentiality

All findings, vulnerability proof-of-concepts, network topology diagrams, source code reviews, and credential audits conducted under our OWASP VAPT and development retainers are protected under strict Non-Disclosure Agreements (NDAs). Findings are delivered strictly via encrypted channels directly to authorized corporate representatives.

6. Data Subject Rights & Erasure Requests

You maintain full sovereignty over your information. At any point, you may request:

  • A complete copy of all communication logs associated with your email address.
  • Permanent, irreversible deletion and purging of your scope packets from our records.
  • Immediate revocation of your verifiable Digital Squad or Student ID listing on sagarmajumdar.in/#verify.

7. Security Desk & Contact Inquiries

For inquiries regarding this charter, vulnerability disclosures, or data privacy requests, contact our security desk directly:

  • Principal Security Director: Sagar Majumdar
  • Primary Encrypted Email: support@sagarmajumdar.in
  • Direct WhatsApp & Triage: +91 6296600565
  • Headquarters: Habra, West Bengal, India — 743263