Privacy Policy
Last updated: January 7, 2026
Our Commitment to Privacy
At Cryptopix Q-SEAL, we believe in Zero-Knowledge Privacy. We cannot read your files because we technically do not have the decryption keys.
✓ Your files are encrypted on your device before upload
✓ Decryption keys never touch our servers
✓ We cannot access your file contents
What We Collect
1. Account Information
- Email address (for authentication)
- Mobile number (hashed, for verification)
- Name (optional, for display)
- Company name (for Enterprise users)
2. Metadata (The "Envelope")
- File size and type
- Upload timestamp
- Expiry date
- Your IP address (for security)
- Device fingerprint (for fraud prevention)
⚠️ We retain metadata for 180 days as per Indian IT Rules 2021
3. What We DO NOT Collect
- File contents (encrypted, we cannot read)
- Decryption keys (stored in URL fragment only)
- File names (encrypted)
- Browsing history
- Third-party tracking cookies
How We Use Your Data
✓ Service Operation
To deliver files, manage accounts, and process payments
💳 Payment Processing
Payment Gateway: Razorpay (PCI DSS Level 1 compliant)
- We do NOT store credit/debit card numbers
- We do NOT store CVV/CVC codes
- Payment tokens stored securely by Razorpay
- Billing address and GST details stored for invoicing
What We Collect:
- Razorpay customer ID (for subscription management)
- Transaction IDs and payment status
- Billing history and invoices
- Subscription status and renewal dates
⚠️ Payment data is retained for 7 years as per Indian tax laws
✓ Security & Fraud Prevention
To detect abuse, prevent illegal content, and comply with law enforcement requests
✓ Analytics (Anonymous)
To improve service performance and user experience
✗ We Never
Sell your data, share with advertisers, or use for marketing without consent
Data Security
🔐 Encryption
AES-256-GCM client-side encryption
🔑 Zero-Knowledge
Keys never stored on servers
🔥 Burn-on-Read
Auto-delete after viewing
✓ Integrity Check
Tamper detection via hash verification
Your Rights
Legal Compliance
We comply with the Information Technology Act, 2000 and the Intermediary Guidelines and Digital Media Ethics Code Rules, 2021.
Law Enforcement Requests
We may disclose metadata (not file contents) if legally required. We will notify you unless prohibited by law.
Data Retention
• Files: Deleted after expiry or burn
• Metadata: 180 days
• Account data: Until deletion request
Contact Us
For privacy concerns or data requests:
Email: support@cryptopix.in
Grievance Officer: As per IT Rules 2021
Response Time: Within 72 hours