Privacy & Security Policy

1. Core Privacy Philosophy: Local-First by Design

At SDD Labs, we believe that candidate exam papers, medical survey questionnaires, and proprietary engineering designs belong solely to you. Unlike legacy cloud solutions that force uploads of high-resolution document images to centralized servers, SDD Labs builds software with a local-first architecture. Whenever you use our WebAssembly runtimes, all image rectification, affine deskew, and mark recognition algorithms execute entirely in your local browser’s memory.

2. Information We Collect

Direct Inquiries: When you contact our engineering team or submit an RFP form, we collect your name, business email address, organization name, and message details strictly for communicating regarding your technical request.

Software Telemetry: By default, our software does NOT transmit scanned document images or individual student responses to SDD Labs. Aggregated, non-identifying performance telemetry (e.g., average recognition time in milliseconds, error status codes) may be collected only when explicitly enabled by enterprise system administrators.

3. Data Protection & Regulatory Compliance

We comply with the European Union General Data Protection Regulation (GDPR), the Turkish Personal Data Protection Law (KVKK), and applicable international standards.

• Zero Permanent Image Storage: For cloud API users, images are buffered in volatile memory only during the active scoring request and immediately purged upon response completion.
• Cryptographic Integrity: Score outcomes are audited via client-verifiable SHA-256 hashes without storing the underlying raw document pixels.
• On-Premise Air-Gap: For high-security environments, we supply air-gapped Docker images that operate without internet access.

4. Cookies & Third-Party Trackers

The SDD Labs corporate website uses zero invasive advertising or third-party behavioral tracking cookies. We utilize essential localStorage keys exclusively to persist your preference for Light or Dark theme.

5. Contacting the Data Protection Office

If you have inquiries regarding our data handling practices or require a signed Data Processing Agreement (DPA) for your institution, contact our compliance team:

Email: [email protected]