HomeLegal

Privacy Policy & Data Processing Notice

Effective Date: January 15, 2026 | Version 2.0

1. What We Collect & Why

Data Type
Purpose of Processing
Legal Basis
Mobile Phone Number
Account creation & WhatsApp Bot access
Explicit Consent
Professional Documents (Scans)
Cloud vaulting & Staff gallery wiping
Contractual Necessity
Biometric Metadata
Secure login & Audit approval
Explicit Consent
Device Logs
Security monitoring & Breach detection
Legitimate Use

2. Cookies & Tracking

We use cookies and similar tracking technologies to track the activity on our Service and store certain information.

Essential Cookies

Necessary for authentication and security. These cannot be disabled.

Analytics Cookies

Help us understand how you use our website. You can opt-out of these.

3. Data Sovereignty

100% of your data is processed and stored on Sovereign Indian Cloud Nodes (E2E Networks / Hetzner India).

No digital personal data is transferred outside the borders of India.

4. Retention Policy

We retain data only as long as your subscription is active.

180 Days

Data erasure post-termination

Unless required by:

Indian Tax or Healthcare Laws

5. Security Measures

Encryption at Rest

AES-256 (Military Grade)

Encryption in Transit

TLS 1.3 (Bank Grade)

On-Device Processing

C++ Native Engine

Audit Logs

WORM Database

6. Your Rights

Under the DPDP Act 2026, you have the right to access, correct, erase, and withdraw consent for your data.

Exercise Your Rights

7. Contact Us

For privacy-related inquiries: privacy@kavachprivacy.com

For grievances: Grievance Redressal Portal