Privacy Policy
Executive Summary (TL;DR)
Philosophy
We build sovereign infrastructure. Your data stays within your nodes. We never sell or "rent" your identity.
Telemetry
Ralph_Engine processes operational signals locally. Metadata is anonymized and encrypted via Bifrost.
Control
Full exportability and 'Right to be Forgotten' are baked into our API by default. Total autonomy.
01_Introduction
At Xenfra, we believe infrastructure should be autonomous, but data must remain sovereign. This policy outlines how Xenfra ("we," "us," or "the Platform") handles the minimal data required to operate the RALPH_Engine and your sovereign nodes.
By using Xenfra, you agree to the collection and use of information in accordance with this policy. We prioritize pseudonymization and encryption at rest for every byte of telemetry we touch.
02_Data_Collection
We maintain a strict boundary between "Infrastructure Telemetry" and "User Identity." We do not monitor the content of your data packets within the Bifrost Bridge.
- • Account Email / Org Name
- • Node Health Metrics (CPU/RAM)
- • Ralph_Engine Logic Traces
- • Billing Transaction Metadata
- • IP addresses for Security Auth
- • Private Encryption Keys
- • Raw Database Content
- • Application End-user Data
- • Unencrypted Traffic Payloads
- • Biometric Information
03_Processing_Logic
The RALPH_Engine uses automated heuristics to ensure 99.9% uptime. This processing occurs primarily at the edge. We use your data to:
- 03.1Execute autonomous healing scripts when node saturation is detected.
- 03.2Calculate Sovereign Arbitrage margins to optimize your infrastructure costs.
- 03.3Communicate critical system alerts via established mTLS tunnels.
04_Sovereign_Rights
Under global data protection regulations (including GDPR and CCPA), you possess specific rights regarding your digital footprint on our interface.
Right to Export_Data
Download a machine-readable JSON trace of all operational telemetry linked to your account at any time via the Console.
Right to Purge_History
Trigger a 'Full-State Wipe' which deletes all telemetry history from our primary clusters within 72 hours.
Right to Object_Processing
Opt-out of non-critical Ralph_Engine heuristic simulations while maintaining manual node control.
05_Security_Architecture
All data transmitted to Xenfra is protected by 256-bit AES encryption. Our Bifrost Bridge utilizes rotating mTLS certificates to prevent unauthorized access to the signaling layer.
AUTH_PROTOCOL: OIDC + WebAuthn
AUDIT_LOG: Immutable_Append_Only
06_Admin_Contact
For inquiries regarding data rights or to report a protocol anomaly, contact our Data Sovereignty Officer: