Privacy Policy
Last updated: 10 October 2026
1. Who we are
SecVault is provided by Rakshachakra Private Limited, a company incorporated under the Companies Act, 2013 (CIN U62099TS2026PTC223950), with its registered office at Flat No. 402, Sathya Jewel Crown, Ameenpur, Ramachandrapuram, Medak – 502032, Telangana, India (“we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary for the personal data described in this policy.
Questions about this policy: support@rakshachakra.com.
2. The short version
- Your files, filenames, file metadata and notes are encrypted on your device with keys derived from your password. We store only the encrypted result and hold no key that can decrypt it.
- We collect the minimum we need to run the service, take payment and meet the law.
- No advertising, no tracking cookies, no selling of data.
- If you lose both your password and your recovery kit, nobody — including us — can recover your files.
3. What we can and can't see
| We can't see | We can see |
|---|---|
| The contents of your files and notes | That an account exists, and its storage plan |
| File and folder names, file metadata | How much storage you use (needed for your quota) |
| Your name, if you add one (encrypted on your device) | Billing records for paid plans (see section 4.5) |
| Your encryption keys and password | Your IP address, briefly, for rate limits and abuse protection |
| Your email address in normal operation (see 4.2) | — |
4. What we collect, by activity
4.1 Visiting this website
The website sets no cookies and uses no analytics or advertising tools. Our network provider, Cloudflare, processes your IP address to deliver the site and protect it from attacks.
4.2 Creating an account
We store your email address in two forms: a one-way keyed hash used to recognise your account at sign-in, and a copy encrypted with your own keys. Neither form can be read by us in normal operation. Your email address is processed in plaintext, briefly, at two moments only: when we send you a one-time verification code, and when you make a payment.
4.3 Storing files and notes
Your files, filenames, file metadata and notes are encrypted in your browser before upload. We store the encrypted result (ciphertext). We hold no key that can decrypt it, so we cannot inspect, preview, scan or moderate your content.
4.4 Sharing
A share link carries the key needed to open what you shared. Anyone holding the link can open it. If a link is reported for abuse, we can disable that link; files you haven't shared stay unreadable to us.
4.5 Paying for a plan
Payments are processed by Razorpay. For paid accounts we store the plan you bought, the amount, the currency, the payment status and identifiers issued by Razorpay. We never see or store your card number, UPI PIN or bank credentials.
4.6 Joining the waitlist
Waitlist requests come in by email. We use your email address for one purpose: to tell you when SecVault launches. We keep it until we've sent that launch email and then delete it within 30 days, unless you create an account. You can ask us to remove your address at any time by emailing support@rakshachakra.com.
4.7 Emails from us
We send transactional emails (verification codes, billing notices, required service notices). We don't send marketing emails unless you've asked for them.
4.8 Contacting us
If you email support or the Grievance Officer, we keep that correspondence to answer you and to keep a record of complaints, as required by the Consumer Protection (E-Commerce) Rules, 2020.
5. IP addresses and logs
We process IP addresses briefly to apply rate limits and stop automated abuse. Server logs that contain IP addresses are kept for 7 days and then deleted. We don't build profiles from them.
6. Who processes data for us
| Provider | What they do for us | Data they handle | Location |
|---|---|---|---|
| Cloudflare, Inc. | DNS, content delivery, API routing, and delivery of transactional email such as verification codes | IP address; your email address, in plaintext, to deliver messages we send you | Global network |
| Backblaze, Inc. | Storage of encrypted file contents | Ciphertext only | Netherlands (EU) |
| Aluy (Julian Achter, Germany) | Server hosting for account and billing records | Account records (hashed and encrypted email, plan, usage), billing records | Netherlands (EU) |
| Razorpay Software Private Limited | Payment processing for customers in India | Contact and payment details you enter at checkout | India |
We don't use any advertising or analytics service that identifies you.
7. Where your data is stored, and transfers outside India
Encrypted file contents, account records and billing records are stored in the Netherlands (European Union). Some providers in section 6 operate from other countries. By using SecVault, you acknowledge that your personal data, in the forms described above, is stored and processed outside India. We transfer data outside India in line with section 16 of the Digital Personal Data Protection Act, 2023, and not to any country the Government of India has restricted.
8. Requests from authorities
We respond only to valid legal requests under Indian law. We cannot decrypt your files, filenames or notes, so we cannot hand them over in readable form. What we could provide, if legally required, is limited to what we hold: account records, billing records and, if still within the log period, IP addresses.
9. How long we keep data
| Data | How long |
|---|---|
| Account records | While your account is open |
| Deleted files (trash) | 30 days, then permanently purged |
| Encrypted content after you close your account | Purged when the account is closed |
| Billing records | As long as Indian tax and company law requires |
| Waitlist email | Until we send the launch email, then deleted within 30 days (unless you create an account) |
| Server logs with IP addresses | 7 days |
10. Your rights
Under the Digital Personal Data Protection Act, 2023, you can:
- ask for a summary of the personal data we process about you;
- have inaccurate data corrected;
- have your personal data erased;
- withdraw consent;
- nominate someone to exercise your rights if you die or become unable to;
- raise a grievance with us, and then with the Data Protection Board of India.
To use any of these, email support@rakshachakra.com from the address on your account. Because your content is encrypted with keys we don't hold, any data export we produce will contain ciphertext. To get readable copies of your files, download them in the SecVault app while signed in.
11. Children
SecVault is for people aged 18 and over. We don't knowingly create accounts for anyone under 18.
12. Security incidents
If a personal data breach happens, we'll notify affected users and the Data Protection Board of India as the law requires.
13. Grievance Officer
Mallipudi Deemanth, Grievance Officer
Rakshachakra Private Limited, Flat No. 402, Sathya Jewel Crown, Ameenpur, Ramachandrapuram, Medak – 502032, Telangana, India
support@rakshachakra.com · +91 94409 38659
We acknowledge every grievance within 48 hours and resolve it within one month. If you're not satisfied, you can escalate to the Data Protection Board of India.
14. Changes to this policy
We'll post changes on this page and update the date at the top. We'll email account holders about material changes.