Privacy Policy

1. Our Core Privacy Commitment

At CyberExpert.in, we believe cybersecurity tools must respect user privacy. We operate on a fundamental principle: Minimal Data Collection and Zero Permanent Storage of Private Communications.

2. What Data We Process

• ScamCheck Text Submissions: When you paste an SMS, WhatsApp message, email, or UPI request into ScamCheck, the content is evaluated transiently in memory to calculate scam patterns. We do NOT permanently store the raw submitted message body in our database without your explicit consent.
• Passwords: CyberExpert NEVER transmits or stores plaintext passwords. Our Password Strength tool evaluates entropy 100% locally in your browser. Our Password Breach Checker utilizes mathematical k-Anonymity, transmitting only a 5-character SHA-1 hash prefix.
• Website Scans: Domain names submitted for posture audits query publicly accessible DNS records, TLS certificates, and HTTP headers.
• Anonymous Telemetry: Aggregated, non-personally identifiable metrics (e.g., total scans completed, general risk level classification) to monitor platform health.

3. Third-Party Services & Hosting

CyberExpert.in is hosted on secure serverless infrastructure provided by Vercel. Network requests and DNS resolutions adhere to strict Server-Side Request Forgery (SSRF) restrictions.

4. Your Rights under the DPDP Act 2023

As a Data Principal under Indian law, you have the right to request information on personal data processed, request correction or erasure of any saved records, and seek grievance redressal.

5. Grievance Officer

For privacy inquiries or grievance redressal under Indian regulations, contact our Data Protection Officer at: privacy@cyberexpert.in.