Privacy Policy

1. The short version

Your documents stay private unless you choose to share them. We don't sell data, we don't run ads, and we don't read your documents for marketing. Shareable proof links are encrypted in your browser — the server cannot read what you shared.

2. What we collect

• Account: your email address and a password hash. No name is required.
• Records: the documents you upload and the details you choose to type (title, dates, price, category, note).
• Derived data: text recognized from your images (OCR) so your own search works. Generated on our own servers; never sent to ad or analytics companies.
• Operational logs: technical events needed to run the service. We deliberately exclude document contents, notes, and proof keys from logs.
• Payments: handled by UPI (directly to our account) or Gumroad. We store only the resulting access status and the references needed to verify your purchase.

3. Proof links (zero-knowledge)

When you create a shareable proof, the shared information is encrypted inside your browser. The decryption key travels in the part of the link after the “#”, which browsers never send to us. We store only unreadable ciphertext — we cannot see, recover, or hand over what you shared.

4. What stays private

Records and documents are visible only to you. A proof link exposes only the fields you selected, for as long as you allow, and can be revoked instantly. Private notes and private documents never travel with an ownership transfer.

5. Retention & deletion

We keep your data while your account exists. Deleting a record removes its documents permanently after a short grace window. Deleting your account removes your records, documents, exports, and proof links immediately and permanently. Backups age out on a fixed schedule.

6. Third parties

We use a minimal set: our hosting provider, our email delivery provider (for verification and password-reset emails), UPI/Gumroad for payments, and Cloudflare for network protection. No third party receives your document contents. Payment providers process only what a purchase requires.

7. Your rights

You can access everything you stored (it's your vault), export it at any time, and delete any record or your whole account yourself — no email to us required.

8. Security

Documents are stored outside the public web root and served only through authorized, logged-in access. Traffic is encrypted in transit. We follow least-privilege access internally.

9. Contact

[Support email to be added before launch.]