Privacy Notice

Last updated: 1 July 2026 · India (DPDP Act 2023)

Kaitara Vault (“we”, “us”) is a venture of Kaitara, based in India. This notice explains what personal data we handle and how, in line with India’s Digital Personal Data Protection Act, 2023. The Vault is in a private, test-data-only preview pending an independent security review — please do not store real critical information yet.

What we handle

  • Your sign-in email — to send one-time sign-in links and service notices.
  • Vault content you seal (messages, files, register items, keys) — encrypted before storage; we cannot read it. It is decryptable only when your guardians approve an unlock.
  • Guardian & beneficiary emails and labels you enter — to deliver keys, notifications, and access.
  • A configuration record (a PDF of your setup + your attestation) and an append-only audit log (actions, timestamps, IP, browser) for security and tamper-evidence.

Zero-knowledge by design

Your sealed content is protected with keys we never hold in full (guardian-held shares + a hardware security module). A breach of our systems does not reveal your content. This is a core design property, not a promise.

Why we process it & on what basis

To provide the vault service you ask for, and to keep it secure. Our basis is your consent and the performance of the service. We do not sell your data or use it for advertising.

Where it lives

Data is stored in India (Mumbai region). We use vetted processors (cloud hosting, database, email delivery) bound by contract to handle data only on our instructions.

Retention

We keep your data while your vault is active. The audit log is append-only and retained for security and tamper-evidence. You may ask us to delete your data (see rights).

Your rights (DPDP)

  • Access a summary of your data and how it is processed.
  • Correct or complete inaccurate data.
  • Erase your data, subject to legal/audit retention.
  • Nominate someone to exercise your rights in the event of death or incapacity.
  • Raise a grievance with our Grievance Officer.

Grievance & contact

Grievance Officer: contactus@kaitara.com. We aim to respond within statutory timelines. We may update this notice; material changes will be posted here.