Legal & Compliance

Privacy Policy

Last Updated: September 4, 2026 • Effective Date: September 4, 2026

1. Overview & Application Scope

This Privacy Policy applies to Cosmutech Solutions Private Limited ("Cosmutech", "we", "our", or "us") and all our associated software applications, websites, services, and mobile tools, including but not limited to Cosmu Vault ("Cosmutech Vault"), Cosmutech ERP, Cosmutech Admin, and cosmutech.com.

We respect your privacy and are committed to protecting your personal data and sensitive information through strict zero-knowledge architecture and end-to-end cryptographic encryption standards.

2. Information We Collect

A. Google Account & Authentication Data

When you sign in using Google OAuth in Cosmu Vault or Cosmutech services, we access basic profile information provided by Google with your explicit permission:

  • Your Google Account email address
  • Your full name and profile avatar URL
  • A unique OAuth identifier token

B. User Vault & Password Data (Zero-Knowledge)

Cosmu Vault is built on a Zero-Knowledge Architecture. All credentials, passwords, cryptographic keys, and sensitive notes are encrypted client-side on your device using AES-256-GCM and Argon2id key derivation before any cloud synchronization occurs. Cosmutech never possesses your master password and cannot read or decrypt your vault contents.

C. Google Drive Cloud Backup Data

If you opt to enable Google Drive Cloud Sync in Cosmu Vault, the app creates and manages only its own encrypted backup archive within your authorized Google Drive storage. We do not access, scan, or modify any other files in your Google Drive.

3. How We Use Your Information

We use the collected information solely for the following purposes:

  • To authenticate your identity securely across devices.
  • To enable encrypted vault backups and synchronization across your authorized devices.
  • To provide customer support, system updates, and security notifications.
  • To protect against fraudulent, unauthorized, or malicious access attempts.

🛡️ We NEVER sell, rent, monetize, or share your personal information or vault contents with third-party advertisers or data brokers.

4. Google API Services User Data Policy Compliance

Cosmu Vault's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use Google OAuth data to provide user-facing vault features that are prominent in the application's user interface.
  • We do not transfer Google user data to third parties unless necessary to provide or improve the user-facing features of Cosmu Vault.
  • We do not use Google user data to serve advertisements, including personalized, re-targeted, or interest-based advertising.
  • We do not allow humans to read Google user data unless you have given explicit consent for troubleshooting or it is required for security/legal compliance.

5. Data Security & Cryptographic Standards

We implement industry-leading technical and organizational measures to safeguard your information:

  • Zero-Knowledge Encryption: Passwords and secrets are encrypted client-side using AES-256-GCM.
  • Secure Transport: All data transmitted between your device, Cosmutech servers, and Google APIs is strictly encrypted using TLS 1.3.
  • Biometric Protection: Cosmu Vault supports on-device biometric unlocking (Fingerprint / Face ID) without transmitting biometric data off-device.

6. Data Retention, Deletion & User Rights

You have full ownership and control over your data at all times:

  • Local & Cloud Deletion: You can purge your entire vault database directly from the Cosmu Vault settings menu at any time.
  • Revoking Google Access: You can revoke Cosmu Vault's Google OAuth access at any time via your Google Account Security Settings.
  • Account Deletion Requests: You may submit an account and data purge request by emailing privacy@cosmutech.com. Requests are processed within 48 business hours.

7. Contact Information

If you have any questions or concerns regarding this Privacy Policy or our security practices, please contact us:

Cosmutech Solutions Private Limited

Email: info@cosmutech.com | mshahez.me@gmail.com

Website: https://cosmutech.com

Locations: Riyadh, Kingdom of Saudi Arabia & Mangalore, India