Privacy Policy

1. Who We Are

Cyber Rakshak is a product of Laabam One Business Solutions OPC Pvt Ltd, a company registered in India. Our platform provides mobile cyber safety and digital evidence capture services.

• Website: cyberrakshak.ai
• Email: privacy@cyberrakshak.ai

2. Data We Collect

We collect only data that you explicitly consent to provide:

2.1 Account Data

• Name and email address — both required to open an account, and the email is where your sign-in code is sent
• Phone number (optional)
• Device information (for security purposes)
• Language preference

2.2 Safety Data (Consent Required)

• Messages and links you submit — The app cannot read your SMS inbox and does not ask for permission to. When you submit a message or a link to be checked, its text is sent to our servers and analysed there; we store the sender, a hash of the content and the result, not the message text.
• Location — GPS data during SOS events and evidence capture only.
• Audio recordings — Only during user-triggered SOS events, with a visible indicator.
• Screenshots/Photos — Only when you manually capture evidence.

The mobile app that would collect the last three is still in development. They are described here because the account and the API that receive them are live today.

2.3 Device Health Data

• Installed app permissions
• Root/jailbreak status
• Accessibility service usage
• Overlay app detection

The phone check that would collect these has not been released. It is described here because the account and the API that would receive the report are live today.

3. How We Use Your Data

• Threat Detection: messages and links you submit are analysed on our servers against known fraud patterns
• Evidence Storage: evidence you capture is stored against your account and cannot be altered afterwards
• SOS Alerts: Location shared with your trusted contacts during emergencies
• Security Reports: device health data you send is used to report back on the device it came from
• Service Improvement: Anonymized, aggregated threat data for community feed

4. Data Storage & Security

• Evidence records are immutable — the platform refuses to delete one or to rewrite what was captured; only details added later can change
• Each evidence record carries a SHA-256 fingerprint calculated on your device at the moment of capture, stored exactly as your device reported it. We do not re-compute it on our servers today, so it is your device’s record of the file rather than an independent check by us
• Evidence endpoints are refused unless the matching consent is recorded, and calls the app makes to your evidence and incident records are logged
• All communication between the apps and our API is over HTTPS

We do not encrypt individual evidence files ourselves today, and we would rather say so than imply otherwise. When that changes, this page changes with it.

5. Data Sharing

We do NOT sell or rent your personal data. We share it only in these cases:

• Service providers: the companies that host our systems, store the files you upload, and process payments for us, only so far as running the Service needs it
• Your trusted contacts: During SOS events, your location is shared with contacts you've designated
• Law enforcement: Only when you explicitly choose to file a report and export evidence
• Community threat feed: Anonymized, aggregated threat data (no personal information)
• Legal requirement: When compelled by Indian court order

6. Your Rights

You can ask us to:

• tell you what we hold about you
• give you a copy of it
• correct something that is wrong
• close your account and remove what we hold, as far as section 9 allows
• withdraw a consent you have given

There is no screen for any of this in the app yet. Write to privacy@cyberrakshak.ai from the address on your account and we will deal with it by hand.

7. Consent Management

Cyber Rakshak operates on a consent-first model: the endpoints that hold your evidence refuse to run until the matching consent has been recorded, and a feature asks for a permission when it needs it rather than at install time.

• All consent grants and revocations are logged with timestamps
• You can withdraw a consent by writing to privacy@cyberrakshak.ai; there is no screen for it yet
• Revoking consent stops the associated data collection

8. Children's Privacy

Cyber Rakshak's Children Safety Mode is in development and has not been released. When it ships it will be controlled by the parent or guardian: we do not collect data from children directly, every monitoring feature will require parental consent, and it will be visible to the child as age-appropriate.

9. Data Retention

• Account data, evidence, incidents, SOS events and device health reports: kept for as long as your account is open, so that you can go back to them
• Evidence cannot be deleted through the app at all — the platform is built so that an evidence record cannot be altered, and that also means it refuses deletion
• When you ask us to close your account, we remove the personal data we hold for you by hand, apart from anything the law requires us to keep and anything the platform refuses to delete. Write to privacy@cyberrakshak.ai and we will tell you what that means for your account
• Audit logs: kept for as long as Indian law requires
• Payment records: retained for the period Indian tax and accounting law requires

10. Payment Information

Paid subscriptions are processed by Razorpay Software Private Limited, our payment gateway. When you pay:

• Your card number, UPI PIN, CVV and bank credentials are entered directly into Razorpay's systems. We never receive or store them. Razorpay is PCI-DSS compliant.
• We store only what is needed to match a payment to your account and refund it: a payment reference, the plan, the amount, and the dates the subscription runs for.
• We share your account identifier and the chosen plan with Razorpay so the payment can be attributed. We do not share your evidence, scan results, or any other data with them.

Razorpay processes this data as an independent controller under its own privacy policy. Payment records are retained for the period required by Indian tax and accounting law.

11. Updates to This Policy

We may update this policy periodically. Significant changes will be published on this page, and the date at the top will say when. Continued use after that constitutes acceptance of the updated policy.

12. Grievance Officer

If you have a complaint about how we have handled your data, write to our Grievance Officer:

13. Contact

For any privacy-related queries, contact us at privacy@cyberrakshak.ai or visit our Contact page.