Privacy & Telepresence Protocol

1.1 Architectural Elimination of Video Storage

All live audiovisual transmissions occur over WebRTC peer-to-peer connections or through memory-only Selective Forwarding Units (SFUs) hosted on Cloudflare's global edge network. Video packets are decoded and displayed in volatile RAM on the receiving participant's device. At no point during transit or session termination are video or audio streams written to persistent hard drives, cloud object storage (such as S3 or GCS), or database blobs. Server disk write volume for media streams is mathematically zero bytes.

1.2 Ephemeral Encryption Key Disposal

Every live transmission room is secured via DTLS (Datagram Transport Layer Security) and SRTP (Secure Real-time Transport Protocol). Session tokens and cryptographic keys are ephemeral: the instant either participant clicks 'End Session' or leaves the room, the session enclave is destroyed and all media keys are irreversibly purged from memory.

1.3 Strict Prohibition on Recording Tools

RAW does not provide any 'Record', 'Replay', or 'Save Session' feature to coaches, students, or administrative staff. Any participant attempting to circumvent this restriction via external screen-recording software without the explicit, documented consent of both parties violates our Terms of Service and faces immediate, irreversible account expulsion and legal referral.

2.1 Client-Side Edge Inference

When live form alignment or posture assistance is enabled, all 33 biomechanical joint landmarks are computed directly on your device hardware (utilizing local WebGPU, WebAssembly, or Apple Neural Engine). The raw camera feed never leaves your personal device sandbox for AI evaluation.

• Zero raw video or image frames sent to cloud AI servers.
• Facial recognition, emotional sentiment analysis, and biometric profiling are strictly prohibited.
• Only lightweight, anonymized 3D joint coordinate deltas (angles and vectors) are shared with your coach's overlay display.

2.2 Zero AI Training Policy

Neither student nor coach movement data is ever utilized to train, fine-tune, or benchmark public or proprietary foundation models (such as LLMs or computer vision networks). Your physical movement remains sovereign.

2.3 Instant Opt-Out Control

You hold unconditional control over posture assistance tools. With a single click of the 'Camera Privacy' toggle inside any active room, all pose vector extraction stops instantly, reverting to a pure peer-to-peer video feed.

3.1 Category Breakdown & Handling Matrix

Below is an explicit disclosure of how every category of data is handled within the RAW platform:

• Live Video & Audio Streams: Processed in ephemeral volatile RAM only. Storage Duration: 0 Seconds. Third-party Access: None.
• Biomechanical Landmark Vectors: Computed locally on client hardware. Storage Duration: Discarded upon call exit. Third-party Access: None.
• Account Credentials (Name, Email, Auth Hash): Stored in AES-256 encrypted PostgreSQL with Row-Level Security. Storage Duration: Until account deletion.
• Payment Details: Handled exclusively via Stripe Connect. RAW never sees or stores raw credit card numbers or banking passwords. PCI-DSS Level 1 certified.
• Scheduling & Attendance Logs: Session timestamps, duration, and completion statuses. Retained for 90 days for dispute resolution and tax reconciliation.

3.2 Unsolicited Surveillance Rejection

We do not employ third-party advertising cookies, cross-site trackers, Facebook Pixel, or data-broker telemetry SDKs. When you train on RAW, your browsing patterns and workout habits are never monetized or exposed to ad networks.

4.1 Rigorous Elder & Guild Accreditation

Unlike algorithmic gig-economy platforms where anyone can label themselves an instructor, every coach on RAW undergoes rigorous identity verification and cultural lineage auditing. For indigenous disciplines like Kalaripayattu, Muay Thai, and Himalayan Yoga, credentials are authenticated through recognized local master guilds and elder councils. Physiotherapists must submit active, verifiable medical licenses in their jurisdiction.

4.2 Anti-Appropriation Charter

All masters retain complete sovereign intellectual property over their training methodologies, traditional lineages, and pedagogical techniques. RAW claims zero ownership or licensing rights over the ancestral knowledge taught by instructors on our network.

4.3 Transparent Lineage Seal

Every verified master profile features a cryptographic Heritage Seal with traceable accreditation details, ensuring students can independently verify lineage authenticity before booking.

5.1 Private 1-on-1 Enclaves

Unless explicitly enrolled in a designated public masterclass cohort, all training rooms are fortified 1-on-1 sanctuaries. No external viewers, coaches-in-training, or platform administrators can invisibly enter or monitor your session.

5.2 Panic Disconnect Mechanism

Every student and coach has access to a dedicated 'Emergency Disconnect' button located in the top control bar. Triggering this button instantly cuts camera, microphone, and socket connections within 20 milliseconds, preventing any further data flow and initiating an optional confidential safety incident report.

5.3 Anti-Harassment & Professional Boundaries

All instructors are bound by a legally enforceable Professional Conduct Code prohibiting inappropriate commentary, solicitation outside platform channels, or crossing therapeutic boundaries. Violations result in immediate suspension, escrow forfeiture, and permanent expulsion.

6.1 Cryptographic Payment Escrow

When you book a session with a master, your payment is held securely in escrow via Stripe Connect. Funds are only transferred to the master after the live transmission concludes without technical failure or verified conduct breach.

6.2 Technical Failure & Disconnection Protection

If an undersea fiber break or regional ISP outage disrupts a session for more than 5 cumulative minutes, the session escrow automatically safeguards the student with a 1-click free reschedule or full refund, while compensating the master fairly based on network logs.

6.3 Local Currency Remittance

Masters in over 115 countries receive payouts directly into their domestic bank accounts in their native currency (e.g. INR, THB, BRL, EUR, GBP, USD), eliminating high currency-exchange markups.

7.1 Right to Erasure ('Right to Be Forgotten')

You may permanently delete your account and all associated metadata at any time from your account settings or by emailing dpo@stibelabs.com. Upon request, all profile entries, booking histories, and authenticated credentials are permanently purged from active production databases within 72 hours.

7.2 Right to Portability

You may export all historical session metadata, posture milestone logs, and transaction receipts in standard JSON or CSV format with a single click.

7.3 No Sale of Personal Data

RAW has never sold, rented, or commercialized personal data or telemetry records to third parties, and will never do so under any circumstances. We are not a data broker.

8.1 Verified Infrastructure Subprocessors

We partner only with security-certified global infrastructure providers bound by strict Data Processing Agreements (DPAs):

• Cloudflare, Inc. (San Francisco, USA): Global edge network, DDoS mitigation, and memory-only WebRTC media forwarding. Certified ISO 27001, SOC 2 Type II.
• Stripe, Inc. (San Francisco / Dublin): Payment gateway, tokenization, and Stripe Connect master payouts. Certified PCI-DSS Level 1.
• Supabase / AWS (Frankfurt / US-East): Encrypted PostgreSQL database hosting for account credentials with AES-256 encryption at rest.

8.2 Regulatory & Healthcare Disclaimer

Sessions on RAW are conducted for cultural heritage instruction, martial athletic training, and general physical wellness. Coaching is not a substitute for emergency medical care. When working with verified physiotherapists, exercises constitute guided self-rehabilitation and require patient self-responsibility.

8.3 Data Protection Officer (DPO) Contact

For formal inquiries, privacy verification requests, or regulatory auditing, contact our designated privacy council at: privacy@rawwellbeing.com or legal@stibelabs.com. Physical inquiries may be addressed to: Stibe Labs Privacy Council, Attention: Data Protection Officer, Bangalore & London.