Terms of Use &
Privacy Policy

1. Overview

These Terms of Use and Privacy Policy govern your use of CyberOak's services, including the Kavach scam detection bot available on WhatsApp (+91 8624892131) and Telegram, and the website cyberoak.in ("the Service").

By using the Service, you agree to these terms. If you do not agree, please do not use the Service.

Service Provider: CyberOak (operated by Mukesh Bhardwaj, Pune, Maharashtra, India)
Contact: help@cyberoak.in
Effective Date: 1 June 2025

2. The Service

CyberOak provides the Kavach bot — an AI-powered tool that analyses messages, URLs, and phone numbers to help users determine if they may be scams. The Service is available free of charge for individual use.

What Kavach does:

• Analyses forwarded messages using AI (Google Gemini)
• Checks URLs against VirusTotal and Google Safe Browsing databases
• Provides a verdict: SCAM, SUSPICIOUS, or SAFE
• Provides emergency guidance if a user reports being actively scammed

Fair Use Limits:

• Maximum 20 message checks per user per day
• The Service is for personal, non-commercial use only
• Automated or bulk use is prohibited

3. Disclaimer — Please Read This

The verdicts provided by Kavach are generated by artificial intelligence and are intended to help users make informed decisions. They are NOT:

• Legal advice or formal legal determinations
• A guarantee that a message is or is not a scam
• A substitute for professional legal, financial, or cybersecurity counsel
• Admissible as evidence in any legal proceeding

CyberOak does its best to keep scam intelligence up to date, but AI can make mistakes. A SAFE verdict does not guarantee that a message is genuinely safe. Always use your own judgment and consult official channels when in doubt.

CyberOak, its operators, and contributors shall not be liable for any financial loss, damage, or harm resulting from reliance on Kavach verdicts. Use the Service at your own risk as an awareness tool only.

4. Privacy Policy

This Privacy Policy is compliant with the Digital Personal Data Protection (DPDP) Act 2023 and the Information Technology Rules 2021 of India.

What information do we collect?

When you use the Kavach bot, we may collect:

• Phone number hash / Telegram user ID: Used to enforce rate limits (20/day) and to associate your data with your rights request. We store a one-way hash, not your actual number.
• Timestamp: When you sent a message, to manage daily limits.
• Verdict metadata: What verdict was given (SCAM/SUSPICIOUS/SAFE) — not the message content — for service improvement analytics.
• Website analytics: Standard anonymised page visit data via Google Analytics (if enabled) — no personal identifiers.

5. What We Do NOT Store

• The content of messages you forward to Kavach is NOT stored permanently. It is processed in memory to generate the verdict and then discarded.
• We do NOT store your name, Aadhaar number, PAN, bank details, or any sensitive personal data.
• We do NOT record or store voice notes.
• We do NOT link your verdicts to your real identity.

How long do we keep data?

• Rate-limit records (phone number hash + timestamp): 24 hours, then automatically deleted.
• Aggregated, anonymised analytics: Up to 12 months.
• Support emails sent to help@cyberoak.in: Retained for up to 3 years for grievance resolution.

Do we sell your data?

No. We never sell, rent, or trade any user data to any third party for commercial purposes.

6. Your Rights Under DPDP Act 2023

As a user, you have the following rights under the Digital Personal Data Protection Act 2023:

• Right to Access: Request a summary of what personal data we hold about you.
• Right to Correction: Request correction of inaccurate personal data.
• Right to Erasure: Request deletion of your personal data at any time.
• Right to Grievance Redressal: Contact our Grievance Officer (see below) for any complaints.
• Right to Nominate: Nominate another person to exercise your rights in case of incapacity.

To exercise any of these rights, email: help@cyberoak.in with subject line "Data Rights Request". We will respond within 30 days.

7. Third-Party Services

CyberOak uses the following third-party services to provide the Service. Each has its own privacy policy:

• Google Gemini AI: Message content is sent to Google's Gemini API for analysis. Google's data processing agreement applies. We use data minimisation — only the message is sent, no user identity.
• VirusTotal / Google Safe Browsing: URLs in messages are checked against these databases. Only the URL (not your identity) is shared.
• Wati.io: WhatsApp Business API provider. Messages on WhatsApp pass through Wati.io's infrastructure. Subject to their privacy policy.
• Google Cloud / Firestore: Service infrastructure. Data is stored in Google Cloud's asia-south1 (Mumbai) region.
• Telegram: Telegram bot messages pass through Telegram's servers. Subject to Telegram's privacy policy.

8. Children's Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has used the Service, please contact help@cyberoak.in and we will delete the data.

9. Changes to These Terms

We may update these Terms and Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. For significant changes, we will post a notice on the website. Continued use of the Service after changes constitutes acceptance of the updated terms.

10. Grievance Officer

In compliance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021, users may file complaints with the Grievance Officer regarding content, privacy, or data-related concerns.

If you are not satisfied with the resolution, you may also approach the Data Protection Board of India (once constituted under DPDP Act 2023) or the relevant Consumer Forum.

11. Contact

For any questions about these Terms or your Privacy:

• Email: help@cyberoak.in
• Website: cyberoak.in
• WhatsApp: +91 8624892131

For cybercrime emergencies, please call the National Cybercrime Helpline: 1930