Privacy Policy

1. Who We Are

SiloCat is operated by Clickswave Labs Private Limited, a company incorporated in Gujarat, India. For the personal data described in this policy, Clickswave Labs Private Limited acts as the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"). We are committed to protecting your privacy and to processing personal data lawfully and transparently.

If you have any questions about this policy or about how we handle your data, you can reach our Grievance Officer at [email protected].

2. Zero Knowledge Philosophy

SiloCat is built on a simple premise: The server knows nothing. We collect the absolute minimum metadata required to facilitate the transfer. Your IP address is used for abuse prevention and rate limiting, but it is not permanently linked to your files in a readable form.

3. Encryption and Storage Architecture

Client-Side: Files are encrypted in your browser using ChaCha20-Poly1305. The keys are never sent to our servers.

Storage (WatchCat): Our internal service, WatchCat, places your encrypted blobs into secure storage (Cloudflare R2 or Backblaze B2). To us, your data is nothing more than opaque encrypted blobs. We cannot read it, mine it, or sell it.

4. Metadata and Logs

We store minimal metadata in our database (for example, file size, mime type, and expiry). For Shadow (anonymous) uploads, this data evaporates after 7 days. For Sanctum (authenticated) uploads, it persists until you delete it. We do not use third-party tracking pixels or analytics.

5. Sharing and Access

Since the decryption key is part of the URL fragment (the part after the '#'), only people with the full link can decrypt the file. If you share the link, you share the key, and we do not have it.

6. Who We Share Data With

We do not sell your data. We rely on a small number of trusted processors, and only to the extent needed to run the service:

• Razorpay for payment processing.
• Cloudflare and Backblaze for encrypted storage.
• Our transactional email provider for account and service notifications.

Some of these processors operate infrastructure outside India, so your data may be processed in other countries under the transfer conditions permitted by the DPDP Act. We may also disclose data where we are required to do so by a valid legal order.

7. Your Rights

Under the DPDP Act, you have the right to access a summary of your personal data, to correct or complete it, to request its erasure, to withdraw consent, and to raise a grievance. To exercise these rights, email [email protected] from your account address so we can verify your request. Please note that some data may be retained where the law requires us to keep it.

8. Children

SiloCat is not intended for anyone under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can address it.

9. Grievance Officer

If you have concerns about how your personal data is handled, you may contact our Grievance Officer:

• Grievance Officer: Dikshant Chandel
• Entity: Clickswave Labs Private Limited
• Location: Gujarat, India
• Email: [email protected]

10. Changes

We may update this policy from time to time. The Last Updated date above reflects the most recent changes, and where a change significantly affects your rights, we will notify you. We appreciate you trusting SiloCat to keep your data private and your WatchCat purring.