Privacy Policy

1. Scope of Privacy Architecture

Kagazo provides online cryptographic digital signature verification for Indian government PDF documents, including e-Aadhaar, state revenue certificates, PAN cards, and DigiLocker files. We recognize that these documents contain highly sensitive Personally Identifiable Information (PII). This policy outlines our absolute commitment to zero persistent data storage.

2. Zero-Retention File Processing

When you upload a PDF to Kagazo for verification:

• Temporary Volatile RAM: The file buffer is received into isolated container memory (RAM) via an encrypted TLS 1.3 tunnel.
• No Database Storage: Your document is never saved to physical hard disks, object storage (e.g. AWS S3), or cloud databases.
• Immediate Deletion: As soon as the cryptographic envelope is parsed and the verification response or stamped file is returned to your browser, all memory allocations are immediately freed and garbage collected.

3. Password Handling

If your document is password-protected (such as e-Aadhaar or e-PAN), the password you enter is used exclusively in memory to decrypt the PDF binary stream for signature parsing. It is never logged in server access logs, never transmitted to third parties, and is purged as soon as the operation terminates.

4. Telemetry & Analytics

We collect privacy-preserving aggregated telemetry (such as total verification count and generic error codes) to maintain server availability and monitor uptime. We do not track individual users across the web or sell behavioral data to advertising networks.

5. Contact Data Privacy Desk

If you have any questions regarding Kagazo's cryptographic security or privacy practices, please contact our privacy compliance desk at privacy@Kagazo.in or visit our Contact Desk.