Compliance Data Protection Enterprise Grade

Shebercraft Privacy Policy & Data Governance

Effective Date: January 1, 2026 • Governing US & Global Engagements

At Shebercraft Engineering («Shebercraft», «we», «us»), we engineer autonomous AI systems and mission-critical web applications for enterprise and high-growth organizations. We treat your proprietary source code, business logic, customer communications, and database schemas with strict enterprise confidentiality.

1. Zero AI Training Guarantee on Proprietary Client Data

«We strictly enforce contractual zero-data-retention agreements with foundational LLM providers (including OpenAI Enterprise, Anthropic Claude, and AWS Bedrock). Your proprietary knowledge bases, vector embeddings, customer inquiries, and documents are NEVER used to train, retrain, or improve public or commercial AI models.»

All Retrieval-Augmented Generation (RAG) vector embeddings created for your organization are partitioned in private, tenant-isolated vector namespaces (e.g. Pinecone, Qdrant) governed by role-based access control (RBAC).

2. Information We Collect & Process

We only collect information strictly required to evaluate architectural scope, deliver milestone sprints, and maintain cloud infrastructure:

  • Contact & Discovery Data: Name, work email address, company name, domain, and project briefs submitted via our strategy booking form or interactive AI consultant widget.
  • Technical Specifications: API credentials, staging environment endpoints, schema files, and design prototypes shared under bilateral Non-Disclosure Agreements (NDA).
  • System Telemetry: Anonymized performance logs, response latencies, and uptime telemetry necessary to uphold production Service Level Agreements (SLAs).

3. Cryptographic Standards & Data Security

Shebercraft implements defense-in-depth infrastructure safeguards aligned with SOC2 Type II and GDPR controls:

  • Data In Transit: Mandatory TLS 1.3 encryption across all incoming and outgoing API endpoints, webhooks, and microservice communications.
  • Data At Rest: AES-256 encryption across all persistent databases, object stores, and vector indices.
  • Infrastructure Isolation: Dedicated Virtual Private Clouds (VPCs), strict IP allowlisting, automated security patching, and mandatory multi-factor authentication (MFA) across all engineer accounts.

4. Sub-Processors & Infrastructure Partners

We work exclusively with enterprise infrastructure providers that guarantee equivalent security baselines:

  • Cloud Infrastructure: Amazon Web Services (AWS), Google Cloud Platform (GCP), Cloudflare.
  • AI Inference: OpenAI API Enterprise, Anthropic Claude API, AWS Bedrock (with data retention disabled).
  • Vector Databases: Pinecone, Weaviate, or self-hosted Qdrant instances.

We do not sell, license, rent, or trade your data or your customers' data to any third-party advertising or marketing brokers.

5. Data Retention, Portability & Purging

Clients retain 100% ownership of all ingested and processed data. Upon project completion or written request, Shebercraft will provide a complete export of all source repositories, databases, and schemas, and will irreversibly purge development caches and staging instances within 14 calendar days.

6. Privacy Inquiries & Data Protection Officer

For data export requests, security assessments, vendor questionnaires, or compliance audits, contact our technical leadership team:

Email: info@shebercraft.kz
Direct Technical Telegram: @sheber_craft
WhatsApp: +7 707 250-66-80

← Back to Shebercraft Engineering View Terms of Service →