Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Axencion ("we," "us," or "our") collects, uses, protects, and discloses information in connection with The Ambassadors mobile applications (iOS and Android) and web services (collectively, the "Service").

The Ambassadors is designed specifically for accredited individuals participating in consequential, confidential communications. By redeeming an invitation credential or using the Service, you acknowledge the data handling practices described in this policy.

2. Information We Collect

We collect only the categories of information strictly required to operate an authenticated, private communications platform:

A. Member Profile Information

When you complete induction into The Ambassadors, you provide:

• Full Name: Displayed to other accredited members in your trusted network.
• Professional Domain & Title: Your field of accreditation (e.g., Diplomacy, Technology, Global Affairs, Finance, Medicine, Science, Government, Arts & Culture) and professional title.
• Profile Photograph (Avatar): An optional image uploaded by you, stored in private cloud storage with Row Level Security (RLS) and accessible only to authenticated members.
• Professional Biography: An optional brief summary of your credentials and background.

B. Invitation & Induction Lineage

Membership is granted exclusively via single-use invitation credentials issued by accredited Ambassadors. We record:

• Cryptographic hashes of invitation codes (original plaintext codes are hashed using cryptographic algorithms and never stored in cleartext).
• Sponsoring Ambassador lineage (the relationship identifying which accredited member introduced you to the platform).
• Induction timestamps and credential redemption records.

C. Authentication & Device Trust Information

The Ambassadors does not use conventional passwords or SMS-based verification codes. We utilize passwordless, hardware-bound cryptographic authentication:

• WebAuthn Passkeys: Public keys, credential identifiers, and authenticator metadata registered through your device hardware (Apple Face ID, Touch ID, or FIDO2 hardware authenticators). Private keys never leave your secure hardware enclave.
• Enrolled Device Records: Device nickname, operating system type (iOS, Android, macOS, Desktop Web), device trust state, enrollment timestamp, and last activity timestamp.
• Cryptographic Identity Public Keys: Public pre-key bundles and identity public keys used for client-side end-to-end encryption. Private decryption keys are generated on and strictly confined to your personal hardware.
• Device Pairing Records: Ephemeral, cryptographically signed tokens used during QR-code-based secondary device enrollment.

D. Communications & Message Metadata

• End-to-End Encrypted Messages: Message content, voice notes, and file attachments are encrypted client-side on your device before transmission. Platform servers function solely as an encrypted relay; we cannot read, decrypt, or inspect the contents of your messages or attachments.
• Encrypted Attachments: Files sent in conversations are encrypted client-side with random symmetric keys prior to storage. Only encrypted ciphertext is hosted.
• Delivery Metadata: Essential operational data including sender identifier, recipient identifier, delivery status, and timestamps necessary for message delivery and multi-device synchronization.

E. Voice & Video Calling (Zero Recording)

• Ephemeral Media Transmission: Real-time audio and video communications utilize WebRTC protocols. Media streams travel directly peer-to-peer between participant devices or through encrypted relay servers when direct NAT connection is obstructed.
• Zero Media Retention: We do not record, listen to, transcribe, monitor, or store voice or video streams. Once a call concludes, media packets cease entirely.
• Call Log Metadata: Call direction (incoming or outgoing), call type (voice or video), outcome (connected, missed, declined, or canceled), authoritative duration (when available), and timestamps recorded to provide your in-app recent calls view. Members may remove entries from their recent call list at any time.

F. Hardware Permissions

• Microphone: Accessed exclusively during active voice and video calls initiated by or connected to you, with explicit operating system consent. Media tracks are immediately released upon call termination.
• Camera: Accessed exclusively during active video calls or when scanning an authorized device enrollment QR code. The camera is released immediately when calling or scanning ends.

3. How We Use Information

We use collected information solely to:

• Authenticate your identity and authorized devices using hardware-bound passkeys.
• Facilitate encrypted communications, calls, and private committee spaces (Doors).
• Maintain the integrity of the accredited member network and sponsor lineage.
• Deliver real-time notifications for incoming calls and messages via APNs and FCM.
• Enforce platform security invariants and respond to member account deletion or device revocation requests.

4. Third-Party Service Providers & Infrastructure

To deliver reliable, globally available communications, we engage trusted infrastructure partners under strict confidentiality and security obligations:

• Cloud Infrastructure & Application Hosting: Amazon Web Services (AWS ECS Fargate, ECR, and Application Load Balancers in the US-East region) hosting backend services and push notification workers.
• Database, Authentication & Encrypted Storage: Supabase Inc. (AWS us-east-2), providing PostgreSQL with enforced Row Level Security (RLS), GoTrue identity management, and encrypted storage buckets.
• Push Notification Infrastructure: Apple Inc. (Apple Push Notification service - APNs) for iOS devices and Google LLC (Firebase Cloud Messaging - FCM) for Android devices. Push payloads contain opaque notification signals to alert devices of incoming traffic.
• TURN Media Relay: Coturn encrypted media relay servers (turn.axencion.com) used strictly for real-time WebRTC packet routing when direct peer-to-peer network paths are firewalled.
• Web Domain & Informational Hosting: Hostinger International Ltd., providing DNS routing and public website hosting for informational documentation at axencion.com.

5. Data Retention & Storage Security

We retain personal information only for as long as your membership remains active and in good standing:

• Member Profiles: Retained while membership remains active.
• Invitation Credentials: Invalidate immediately upon claiming or expiration.
• Call & Audio/Video Streams: Zero server retention. Real-time media streams are never stored.
• Recent Call Records: Stored to provide your device's recent calls list. You may delete records from your history at any time.
• Emergency Lockdown: In the event of device compromise, you can trigger Emergency Lockdown in Settings to instantly wipe local cryptographic keys, credentials, and session state on that device.

6. Account & Data Deletion (Apple App Store Compliance)

In accordance with Apple App Store Review Guidelines and international data protection laws, members have the right to request permanent account deletion and erasure of personal data:

1. In-App Session Termination: Navigate to Settings & Security > Emergency Lockdown to immediately revoke device authorization and clear local cryptographic vaults.
2. Permanent Account Deletion: You may submit a formal deletion request by contacting our privacy officer at privacy@axencion.com from your verified communication channel.
3. Data Erasure Process: Upon verification, your profile, device registrations, avatar photographs, and account records will be permanently expunged from primary production databases within 30 calendar days.

7. International Data Rights (GDPR & CCPA/CPRA)

Depending on your location, you hold legal rights regarding your personal information:

• Right of Access: You may request a copy of the personal information we maintain about you.
• Right to Rectification: You may correct inaccurate or incomplete profile information directly within the application.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your member account and associated profile records.
• Right to Restriction & Objection: You may restrict or object to specific processing of your personal information.

8. Children's Privacy

The Ambassadors is strictly an accredited professional and diplomatic communications platform. The Service is not directed to individuals under eighteen (18) years of age, and we do not knowingly collect personal information from minors.

9. Policy Updates

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Significant modifications will be communicated through the Service or through authenticated platform notices. The "Effective Date" at the top of this policy indicates when the latest version took effect.

10. Privacy Contact & Inquiries

For inquiries regarding this Privacy Policy, your personal data, or account deletion requests, please contact: