Legal · Privacy

Privacy Policy

We believe in radical transparency about how we handle your data.

Effective: 1 February 2026·Governed by DPDP Act 2023 & IT Act 2000· No personal data sold. Ever.

💡 Privacy in Plain Language

🖼️

Your images never leave your device

All hashing happens in your browser. We only receive a 64-character code.

🚫

Zero advertising or data sales

We do not monetize your data in any form.

🗑️

Delete anytime

Request full erasure of your case data at any time from your Dashboard.

1. Information We Collect

Raksha Hash collects only the minimum data necessary to provide our NCII protection service:

  • Image Hash (PDQ Fingerprint)A 256-bit mathematical fingerprint of your image, computed entirely in your browser. This is a one-way transformation — we cannot recreate your image from it.
  • Case ID & PINA randomly generated alphanumeric ID and 4-digit PIN assigned to your case. These are your credentials to manage your case.
  • Anonymised AnalyticsAggregate page view counts and error logs with no personal identifiers attached.

2. What We Never Collect

We explicitly do NOT collect:

  • Your actual images or video files
  • Your name, email address, or contact information (unless you contact support)
  • Your location, IP address, or device fingerprint
  • Browser history or cross-site tracking data
  • Payment or financial information

3. How We Use Your Information

Image hashes registered with Raksha Hash are used exclusively for:

  • 01. Comparing against images submitted to partner platforms for NCII detection.
  • 02. Blocking confirmed hash matches from being distributed or uploaded.
  • 03. Improving the accuracy and coverage of detection algorithms (only using hashes, never images).

We do not use your data for advertising, profiling, or any commercial purpose. Full stop.

4. Data Sharing & Third Parties

We only share data in the following limited circumstances:

Partner PlatformsDe-identified image hashes are shared with social media and messaging platforms integrated into our detection network. No personal information is ever shared.
Law EnforcementWe may disclose information if required by law, a valid court order, or to protect the safety of our users. We will notify you unless prohibited by law.
Service ProvidersWe use minimal third-party infrastructure providers (e.g., cloud hosting) who are contractually bound to confidentiality and cannot use your data for their own purposes.

5. Data Retention & Deletion

Your image hashes are retained as long as your case is active.

⚠️ Important: We cannot recover lost credentials

Raksha Hash is end-to-end encrypted. We have zero access to your Case ID or PIN. If you lose them, we cannot help you recover them. Please save them securely.

🗑️

Delete via Dashboard

Enter your Case ID and PIN in the Dashboard and select "Delete Case" to permanently remove all associated hashes. This is the only way to delete your case.

6. Your Rights (DPDP Act 2023)

Under India's Digital Personal Data Protection Act 2023, you have the following rights:

Right to AccessRequest a summary of data associated with your Case ID.
Right to CorrectionRequest correction of inaccurate data we hold.
Right to ErasureRequest permanent deletion of your case data at any time.
Right to Grievance RedressalFile a grievance with our Data Protection Officer within 30 days of any concern.
Right to NominateNominate a trusted person to exercise your rights in the event of your death or incapacity.

7. Security

We implement industry-standard security practices:

AES-256 Encryption

Data at rest

TLS 1.3

Data in transit

Client-Side Hashing

Images never uploaded

Our full codebase is open-source. You can audit it yourself on GitHub. See our Security page for full details.

8. Contact & Grievances

General Privacy Queries

For non-urgent questions about how your data is used. Note: we cannot recover lost Case IDs or PINs.

support@amanblaze.in

This policy was last reviewed by our Data Protection Officer on 28 February 2026.