This Privacy Policy governs the collection, processing, and protection of personal data and encrypted information across encbyt.in and all associated services operated by Encbyt Technologies ("Encbyt", "we", "us", or "our").
1. The Zero-Knowledge Cryptographic Standard
Encbyt operates on a verified Zero-Trust, Zero-Knowledge security model. All cryptographic calculations execute exclusively on your client device prior to data transmission:
- Client-Side Authenticated Encryption (AES-256-GCM): Files, directory hierarchies, and associated file metadata strings are sealed locally in your browser memory before leaving your computer.
- Sole Key Custody: Your master password, derived private keys, and deterministic 24-word recovery phrases remain exclusively on your physical hardware. They are never transmitted across the network, cached in server memory, or stored in any database.
- Opaque Ingestion: Our servers receive, route, and store only unreadable, authenticated ciphertext blocks. We do not possess the mathematical capability to decrypt your data under any circumstance.
2. Comprehensive Data Audit: What We Process vs. What We Refuse to Collect
We maintain a strict "Minimum Viable Data" policy. We process only what is technically required to maintain operational stability and enforce subscription tier quotas.
Operational Data We Process
- Account Identification: Your registered email address and an irreversibly hashed password verification token used to authenticate login sessions without exposing your actual credentials.
- Storage Allocation Metrics: Aggregate byte counters associated with your account solely to enforce storage tier limits (e.g., 128 GB, 256 GB, 1 TB, 2 TB).
- Billing & Transaction Identifiers: Subscription tier status, renewal dates, and third-party payment transaction IDs. All payment processing is handled by PCI-DSS Level 1 compliant processors; Encbyt never receives, processes, or stores credit/debit card numbers or banking passwords.
- Ephemeral Session Tokens: Cryptographically signed tokens stored in local browser memory to maintain authenticated sessions without re-authenticating on every page reload.
Data We Categorically Refuse to Process or Retain
- No Plaintext File Contents: We never receive, process, view, or parse unencrypted file payloads.
- No Unencrypted Metadata: File titles, extensions, folder structures, and byte offsets are obfuscated client-side into ciphertext.
- No File Access IP Tracking: We do not log, track, or associate IP addresses with individual file uploads, downloads, or access requests.
- No Third-Party Advertising Beacons: Zero third-party tracking cookies, marketing analytics, retargeting pixels, or data broker integrations.
- No Algorithmic Profiling: We do not index, categorize, or scan files for machine learning models or commercial targeting.
3. File Transfers, Pause/Resume & Device Stability Safeguards
- State Preservation for Pause & Resume: Encbyt allows users to pause and resume file transfers. To deliver this resilience, your local browser records segment offsets locally in browser memory. Once connectivity is restored, the transfer resumes from the exact byte where it paused without transmitting unencrypted metadata.
- 5 GB Web File Limit: To prevent local device memory exhaustion and browser tab crashes during heavy client-side AES-256-GCM encryption, the web console enforces a maximum single file size of 5 GB. This boundary preserves browser stability across personal computers and mobile devices. You may store as many 5 GB files as your overall vault storage quota accommodates.
4. Sovereign 24-Word Recovery Protocol & Key Governance
Standard cloud platforms maintain centralized administrative backdoors to reset customer passwords. Encbyt eliminates this vulnerability entirely through self-sovereign cryptography:
- Deterministic 24-Word Recovery Seed: When you register, a deterministic 24-word recovery phrase is generated locally on your screen. This phrase is never transmitted to Encbyt servers.
- Self-Sovereign Password Resets: Password resets can only be executed by providing your valid 24-word recovery phrase inside the recovery interface. Entering this phrase allows your local browser to re-derive your encryption keys and assign a new master password. Encbyt staff have no technical ability to reset passwords on your behalf.
- In-Session Regeneration: If you know your active master password and can access your vault, you can view or generate a fresh 24-word recovery phrase at any time inside
Account Settings → Cryptographic Security, immediately invalidating any previously issued recovery seed. - Irreversible Loss Boundary: If you misplace both your master password and your 24-word recovery phrase, your vault remains mathematically locked forever. Encbyt accepts zero liability for inaccessible data resulting from lost credentials.
5. Data Retention, 90-Day Dormant Preservation & Hardware Sanitization
Encbyt maintains a clear data lifecycle to balance physical storage management with customer data protection:
- Active Storage: Encrypted data blocks remain in high-durability clusters for the duration of your active subscription or 30-day evaluation trial.
- 90-Day Standby Dormant Preservation: If a trial expires without conversion or an active subscription lapses due to non-renewal, the account enters an inactive state. Associated encrypted data blocks are transferred into an isolated, dormant preservation tier for ninety (90) days. During this period, your files remain fully encrypted, isolated from outside networks, and can be instantly restored upon selecting an active plan.
- Permanent Hardware Sanitization: If an account is not reactivated within ninety (90) days, automated sanitization routines permanently and irreversibly wipe all associated encrypted ciphertext blocks from physical storage arrays to reclaim hardware. Purged data cannot be recovered under any circumstance.
- User-Initiated File Deletions: When you delete a file or empty your encrypted trash, associated ciphertext blocks are flagged and purged immediately from active clusters.
6. Distributed Storage Clusters & Transit Hardening
Your encrypted ciphertext blocks are distributed across enterprise-grade, geographically redundant object storage facilities adhering strictly to SOC 2 Type II and ISO 27001 data security standards.
- Zero Infrastructure Visibility: Physical storage cluster operators have zero technical visibility into your data contents or file names.
- Transport Hardening (TLS 1.3): All network handshakes and encrypted block transfers use TLS 1.3 with Perfect Forward Secrecy (PFS), mitigating transit-layer eavesdropping.
7. Statutory User Rights (GDPR, CCPA & Indian DPDP)
Depending on your jurisdiction, you hold specific statutory rights regarding personal data. Because Encbyt operates on zero-knowledge encryption, these rights are executed with cryptographic precision:
- Right to Access & Portability: You can download and export your encrypted data blocks or decrypted files directly through your authenticated browser vault. We cannot furnish decrypted files upon email request because we do not hold your private keys.
- Right to Rectification: You may update your account email and administrative credentials at any time via your dashboard.
- Right to Erasure ("Right to be Forgotten"): Initiating an account deletion immediately triggers the cryptographic unmapping and permanent physical sanitization of all associated storage blocks.
- Non-Discrimination: Encbyt does not sell, rent, or trade your personal information. We provide equal cryptographic protection across all subscription tiers regardless of statutory jurisdiction.
8. Judicial Inquiries & Law Enforcement Demands
Encbyt respects valid judicial processes and complies exclusively with legally binding court orders issued by competent judicial authorities. However, our zero-knowledge architecture imposes absolute mathematical constraints on our disclosures:
- We cannot produce decrypted files, readable documents, or unencrypted folder paths.
- We cannot bypass your 24-word recovery phrase or issue administrative password overrides.
- In response to enforceable legal orders, we can only confirm basic operational account metadata: registration timestamp, subscription tier status, and aggregate storage capacity.
9. Data Protection Officer & Corporate Headquarters
For inquiries regarding our cryptographic privacy standards, data governance, or statutory privacy rights, please contact our compliance department:
Operating Entity: Encbyt Technologies
Engineering & Operational Headquarters: Dist- Pali, Rajasthan, India
Data Protection Officer (DPO): privacy@encbyt.in
Legal & Compliance Office: legal@encbyt.in
General Communications: contact@encbyt.in