CYBERZURAMAIL
Digital Personal Data Protection Act (DPDP Act, 2023) Compliant

Privacy Policy

Effective Date: September 2026 • Data Fiduciary: Cyberzura Mail, India

1. Our Fundamental Privacy Commitment

Cyberzura Mail is engineered from first principles as an untracked, privacy-first communications service. Under the Digital Personal Data Protection Act, 2023 (DPDP Act), Cyberzura acts as a Data Fiduciary bound by strict purpose limitation.

We do NOT sell, license, monetize, or train advertising or artificial intelligence models on your email text, subject lines, purchase receipts, or contact lists.

2. Data We Collect & Lawful Purpose of Processing

In accordance with Section 4 of the DPDP Act 2023, data is collected exclusively with your explicit consent and strictly for the operational delivery of email:

  • Identity & Account Data: Username, chosen handle (@cyberzura.app), and display name to route incoming electronic mail.
  • Hardware Passkey Public Credentials: Cryptographic public keys generated via WebAuthn FIDO2 on your device (fingerprint, Touch ID, Face ID, Windows Hello) for authentication. Note: Your raw biometric data never leaves your device's Secure Enclave/TPM chip.
  • Transmission Metadata: Temporary SMTP transmission headers (RFC 5322), sender IP, recipient IP, and timestamps, retained solely for protocol integrity and spam filtration as required by CERT-In security guidelines.

3. Remote Tracking Pixel Neutralization

Commercial email marketers frequently embed 1x1 invisible tracking pixels to spy on when you open an email, your IP address, and your approximate geolocation. Cyberzura shields all remote images by default, blocking third-party tracking beacons before they can reach external servers.

4. Google Drive BYOS & Zero Server Storage

When you connect Google Drive to your Cyberzura business workspace, your email attachments are uploaded directly to your own Google Drive storage container (/Cyberzura Mail Storage/Attachments) via OAuth 2.0. Cyberzura does not retain copies of your Drive attachments on our infrastructure.

5. Your Rights as a Data Principal (DPDP Act 2023)

Under Chapter III of the DPDP Act 2023, you hold full statutory rights regarding your personal data:

Right to Access & SummaryRequest a full copy of your identity and communication logs.
Right to Correction & ErasurePermanently delete your mailbox, credentials, and message indices.
Right to NominateNominate an individual to exercise your data rights in the event of death or incapacity.
Right of Grievance RedressalDirect access to our designated Indian Grievance Officer.

Contact Our Data Protection Officer

For any questions concerning data processing, rights requests under the DPDP Act 2023, or account deletion, write to:

Email: privacy@cyberzura.app / grievance@cyberzura.app
Address: Cyberzura Mail Compliance Division, Malerkotla, Punjab, India