Privacy Policy & Compliance Standards

1. Regulatory Compliance Frameworks

Futurix (Brand of Habbiton labs Pvt Ltd) operates on zero-trust principles. We engineer data processing architectures aligned with the highest global and regional regulatory standards:

2. Information We Collect

Depending on your interaction with our website, platforms, and client portals, we collect:

• Corporate Contact Details: Name, business email, organization, phone number, and project scope submitted via discovery request forms or direct communication channels.
• Enterprise Telemetry: Anonymized usage data, latency benchmarks, and error logs collected to maintain high-availability services and platform performance.
• Client System Data: Under specific Master Services Agreements (MSA) or Statements of Work (SOW), client-provided data for evaluating or orchestrating private local AI models is kept isolated and strictly within tenant VPCs.

3. Purpose and Legal Basis for Processing

We process your personal and corporate information under the following legal bases:

• Performance of Contract: To deliver custom AI engineering, enterprise SaaS subscriptions, autonomous agent workflows, support agreements, and cloud infrastructure management.
• Legitimate Interests: To optimize system performance, safeguard intellectual property, and prevent cyber threats or unauthorized intrusions.
• Legal Obligation: To comply with mandatory financial reporting, auditing, and statutory regulations in the jurisdictions where we operate (UAE, UK, US, India).

4. AI Sovereignty & Data Isolation

Private RAG deployments and local LLMs are containerized within client-controlled boundaries or dedicated sovereign clusters. Data processed during inference is not retained by third-party model providers, enforcing zero-data-retention (ZDR) architecture.

5. Your Rights and Data Control

Under applicable international data protection statutes (including GDPR, UAE PDPL, India DPDP, and CCPA), you possess the right to:

• Access, rectify, or request the erasure of your personal records.
• Restrict or object to specific automated processing pipelines.
• Request data portability in standard machine-readable formats.
• Withdraw cookie and telemetry consent at any time via our Consent Manager.
• Lodge a complaint with your respective supervisory data protection authority.

6. Data Retention & Security Measures

We retain personal data only for as long as necessary to fulfill the operational purposes outlined in this Policy or comply with mandatory statutory retention obligations. All data in transit is protected using TLS 1.3 encryption, and data at rest is encrypted using AES-256 standards with automated key rotation.