LegacyDataby KamyabCheck my risk
Menu

Trust & privacy

Fifteen years of photos is not just data

You would be trusting us with children’s first years, weddings, documents and letters. So here, in plain words, is what we do with your devices and what we never do.

§ 01 — Our commitments

Our promises, in writing.

Privacy is not a feature added at the end. It is how the work is organised, from the moment a device arrives to the day our copies are deleted.

  1. Your data remains yours.We claim no rights over your files. The archive belongs to you from the first byte to the last.
  2. You choose where it goes.Your own cloud account, a new drive you keep, or both. We do not hold on to your archive.
  3. We do not train AI on your files.Your files are never used to train AI, and content-level AI inspection is not enabled.
  4. We do not casually browse your files.Files are handled as data to copy and verify. Opening one is limited to confirming a copy is readable, and only with your agreement.
  5. Working copies have an end date.Temporary copies are kept for a defined period — 30 days by default — so you can check everything.
  6. Every migration is verified.Counts and sizes are compared before anything is called finished, and you review the result yourself.
  7. Every device is tracked.Each device is tagged on arrival and every movement is written to a chain-of-custody record.
  8. Staff access is controlled.Staff access is by role: technicians see only the projects assigned to them, and every sign-in, change and document download is logged.
  9. Passwords are not casually stored.If a device needs a password, it is used for the job and not kept in notes, chats or email.
  10. Temporary copies are securely deleted.At the end of the retention period our working copies are erased and you receive a deletion certificate.

§ 02 — What we store, and what we never store

Our system knows about your files. It does not hold them.

The software we use to run projects records only operational details: which device, how many files, how much data, whether a migration and its checks passed. It does not need your photos to do that, so it does not keep them.

What we record

  • Your name, email address and phone number, so we can reach you
  • Job and device details: make, model, serial number, condition, tag number
  • Aggregate figures only: how many files, and how much data, per device
  • Migration and verification status, and any errors the software met, such as a file that could not be read
  • The documents we issue: quotes, verification reports, deletion certificates
  • Payment records from Razorpay. Card details are entered with Razorpay, not on our site

What we never store

  • The contents of your files: photos, documents, videos, messages
  • Your file names, uploaded in bulk into our systems
  • Your passwords or PINs in notes, chats or email
  • Anything about your files given to an AI service

No AI runs on the content of your files. Your files travel from your device to the destination you chose, and are held on our working storage only for the retention period.

§ 03 — Chain of custody

Every device is tagged, photographed and accounted for.

When a device arrives it is tagged and photographed. When nobody is working on it, it is in locked storage. Every movement, from received to returned, is added to an append-only record: new entries can be added, but old ones cannot be changed or removed.

You can ask to see the record for your own devices at any time.

A technician wearing an anti-static wrist strap holds a bare hard drive by its edges over a dark anti-static mat, where three other drives wait with paper tags tied to them.
Fig. 1Drives are handled by their edges, on an anti-static mat, one tagged device at a time.
Specimen

Chain-of-custody record

WD external HDD · 1 TB

  • DEVICE RECEIVED
    Received at drop-off; photographed
  • DEVICE TAGGED
    Tag attached; serial recorded
  • PLACED IN SECURE STORAGE
    Locked cabinet
  • ASSIGNED TO TECHNICIAN
    Health check booked
  • MIGRATION STARTED
    Read-only copy in progress
  • RETURNED TO STORAGE
    Copy verified
  • DEVICE RETURNED TO CUSTOMER
    Signed for by owner

Every device gets a record like this. You can ask to see yours at any time.

§ 04 — People & access

Access follows the role and the job.

  • 01

    Access follows the job.

    Staff have roles. A technician sees only the projects assigned to them, and only what the work needs.

  • 02

    Access is logged.

    Every sign-in and every change to a project is written to a log that cannot be edited afterwards.

  • 03

    You see only your own project.

    Your status page shows your devices, stage, quotes, payments and documents, and nothing belonging to anyone else.

  • 04

    Passwords are handled with care.

    A password you share for a device is used for that job. It is not kept in notes, chats or email.

§ 05 — Retention & deletion

Our copies have an end date.

Please check your archive before you wipe any of your original devices. Once our copies are deleted, we cannot restore them.

An old hard drive and a new one beside an archival storage box.
Fig. 2Your archive ends up with you, in your account or on a drive you keep.

Read the retention policy

  • 01

    Working copies are kept for 30 days

    This gives you time to review everything. The period agreed for your project is the one that applies.

  • 02

    We warn you before deletion

    We write to you 7 days before our copies are deleted, so you can tell us if you need more time.

  • 03

    Then we delete them securely

    Our temporary working copies are erased, and you receive a deletion certificate.

  • 04

    Your devices come back

    Every device you gave us is returned, and its return is added to its chain-of-custody record.

§ 06 — Your rights

Under India’s DPDP Act 2023, you decide.

The Digital Personal Data Protection Act, 2023 gives you rights over your personal data. To use any of them, write to aj@kamyab.co.in.

  • 01

    Access

    Ask what personal data we hold about you, and why.

  • 02

    Correction

    Ask us to correct anything that is wrong or out of date.

  • 03

    Erasure

    Ask us to erase personal data we no longer need to keep. Some records, such as invoices, we must keep by law.

  • 04

    Grievance

    If something is not right, tell us. We will acknowledge it and answer you in writing.

The policies behind this page

§ 07 — How we use software and AI

AI-assisted. Human-supervised. Customer-owned.

Three short phrases, and what each one means here. If we use AI at all, it is for things like explaining risk in plain language. It never touches the content of your files.

  • 01

    AI-assisted

    Software does the repetitive, exact parts of the work: copying, counting and comparing. It makes the checks the same every time. It does not read or interpret your photos, documents or messages, and nothing about their content is given to an AI service.

  • 02

    Human-supervised

    People supervise every step: the assessment, each migration, and the verification report. A person is accountable for your project from the first device in to the last device out.

  • 03

    Customer-owned

    The archive is yours and goes where you choose. We claim no rights over it, and your files are never used to train AI.

Start here

Find out what your old devices are holding on to.

Check my digital legacy riskTalk to LegacyData