Privacy Policy

About This Document

This page combines our Privacy Policy, Cookie Policy and Product & Security Statement. It applies to the WiporaErase software, the customer portal and the cloud reporting platform, operated by Wipora InfoTech of Meydan, Dubai, United Arab Emirates.

PART A — PRIVACY POLICY

How we collect, use and protect your information.

Introduction

Wipora InfoTech ("we," "our," or "us"), registered in Dubai, United Arab Emirates, with our principal office at Meydan, Dubai, U.A.E., operates the WiporaErase software, customer portal, and cloud reporting platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you access, download, or use our Service globally. By using our Service, you agree to the collection and processing of information as described in this Policy.

1. Information We Collect

• Account and Contact Data: Name, email address, company name, phone number, and account login credentials submitted through our customer portal.
• Transactional Data: Records of custom quotes, billing interactions, payment confirmations, and license key fulfillments.
• Technical & Diagnostic Data: Drive diagnostic logs, performance reports, IP addresses, browser types, and operating system data automatically recorded when your systems interact with our cloud reporting portal.
• User-Generated Content: Support tickets, text messages, or images uploaded by you when requesting customer service or reporting a technical issue.

2. How We Use Your Information

• Create, manage, and authenticate customer portal accounts and deliver software license keys.
• Process quotes, orders, and renewals.
• Analyze cloud-based diagnostic logs and software performance.
• Respond to customer support requests.
• Maintain security, prevent fraud, and enforce Terms and Conditions.

3. Legal Basis for Processing

• Performance of a Contract.
• Legitimate Interests.
• Legal Obligations.

4. Data Sharing and Disclosure

• Service Providers: Trusted cloud hosting providers, payment processors, and communication tools under confidentiality obligations.
• Legal Compliance: When required by law or to protect Wipora InfoTech rights and property.

5. Data Storage and Security

We implement technical, physical, and administrative safeguards including encryption and access controls. Data is retained only as necessary for business and legal purposes.

6. International Data Transfers

Information may be transferred to, processed, and stored in the UAE or other international cloud regions.

7. Your Data Privacy Rights

• Access & Correction.
• Deletion.
• Withdrawal of Consent.

PART B — COOKIE POLICY

How our website and customer portal use cookies and similar technologies.

B1. Essential Cookies

We use essential cookies to maintain your authenticated session and ensure platform security. These cannot be disabled.

B2. Analytics Cookies

With your consent, we may use analytics cookies to understand how the platform is used. These are opt-in only.

B3. Managing Cookie Preferences

You can manage or clear cookies through your browser settings. Clearing essential cookies will require you to sign in again.

PART C — PRODUCT & SECURITY STATEMENT

Security controls, standards alignment, and audit-evidence mechanisms.

1. Zero Payload Retention Policy

WiporaErase operates strictly as an enterprise data sanitization and hardware diagnostic software utility. WiporaErase never accesses, extracts, reads, copies, monitors, or transmits customer payload data stored on target hard disk drives (HDDs), solid-state drives (SSDs), NVMe drives, or mobile storage media. During execution, software routines strictly perform logical overwrites or send direct controller-level firmware commands. Target media is sanitized in accordance with the selected international standard — NIST SP 800-88r2, IEEE 2883-2022, or legacy DoD 5220.22-M — and the method achieved (Clear or Purge) is recorded on the certificate.

2. Telemetry & Product Usage Data

Note: WiporaErase telemetry does not capture or transmit file contents, directory names, personal user documents, or host system files.

• Account & License Validation: Organization ID, active software version, license tier, and token consumption counts.
• Execution Environment Metadata: Operating environment parameters, host hardware architecture, OS build, and execution environment.
• Performance Telemetry: Anonymized execution metrics, failure codes, drive write speeds, and execution duration.

3. Sanitization Logs & Cryptographic Certificates

• Information Collected: Drive model, serial number, storage capacity, bus interface, bad sector count, selected sanitization algorithm, execution status, operator ID, and timestamp.
• Tamper-Evident Hashing: SHA-256 cryptographic hashing for immutable audit trails.
• Storage & Ownership: Audit logs remain the property of the client organization with TLS 1.3 and AES-256 protection.

4. Security Practices & Standards Alignment

• Supported Standards: NIST SP 800-88r2, IEEE 2883-2022, DoD 5220.22-M (legacy).
• Audit Readiness: SHA-256 hashed Certificates of Data Destruction.
• Cloud & System Security: HTTPS/TLS 1.3, MFA and RBAC.
• Software Integrity: Digitally signed binaries and execution environments.

5. UAE Legal & Regulatory Compliance

• Data Protection: Aligned with UAE Federal Decree-Law No. 45 of 2021 (PDPL).
• Electronic Transactions: Certificates and logs recognized under UAE Federal Decree-Law No. 46 of 2021.
• Governing Law: United Arab Emirates.

Responsible Disclosure

If you discover a security vulnerability, please contact legalsecurity@wiporaerase.com. We commit to acknowledging reports within 48 hours.

Scope and Safe Testing

Testing is permitted only on accounts you own or have explicit written authorization to test. Automated scanning and denial-of-service testing are prohibited.

Contact Information

For privacy, security or compliance enquiries, please contact:
Email: legalsecurity@wiporaerase.com
Location: Meydan, Dubai, United Arab Emirates