Privacy Policy
Privacy Policy
Effective Date: July 20, 2026
At AION Defense, safeguarding the confidentiality, integrity, and security of corporate, government, and personal data is our highest priority. This Privacy Policy outlines how we collect, use, process, and protect information submitted to our Platform.
1. Information Collected
To operate our secure B2B gateway, we collect the following categories of data:
- Identity & Contact Information: Name, professional title, corporate email, official telephone number, and department/division.
- Organizational Credentials: Company name, registration documents, Tax IDs (PAN/TAN), corporate certificates, and defense accreditations.
- Sovereign Compliance Vault Data: Cryptographically isolated files uploaded by Users to prove compliance, including Buyer Authorization letters and Partner Accreditation documents.
- Technical & Usage Data: Internet Protocol (IP) address, login tokens, session logs, browser type, and navigation paths.
2. Use of Information
We process collected data exclusively for authorized business and security purposes:
- To execute identity validation, multi-factor OTP challenge, and compliance audits.
- To maintain a secure, tamper-proof onboarding audit log.
- To enable secure B2B transactions between verified Buyers and OEMs.
- To comply with regulatory obligations and state security mandates.
3. Data Isolation and Security
All uploaded files are written to a cryptographically locked storage directory (the "Sovereign Document Vault"). Document filenames are hashed using unique UUIDs to prevent directory traversal and public indexing. Transmission is secured via high-grade TLS 1.3 encryption, and data at rest is protected with AES-256 standard encryption. Standard user edit views are completely decluttered and hidden from non-admin roles.
4. Cookies and Session Tokens
We use essential security cookies to store active session identifiers, authenticate login requests, and manage secure session expiration. We do not employ tracking or advertising cookies on our secure portals.
5. Third-Party Disclosures
We do not sell, trade, or rent personal or organizational data to any third party. Data may be shared with regulatory agencies, government bodies, or law enforcement only when strictly required by law or in accordance with defense export regulations.