Privacy Policy

Last Updated: October 2026

Zero-Knowledge Privacy: RetireOS is architected so that your sensitive financial projections, salary, assets, and net worth are encrypted directly in your web browser with AES-GCM-256 before cloud synchronization. We cannot decrypt or view your financial records.

This Privacy Policy describes how Hyperparameter Technologies LLP ("Company", "we", "us", or "our") collects, protects, uses, and shares information when you use RetireOS (the "Software" or "Service").

1. The Zero-Knowledge Architecture

Your privacy is mathematically guaranteed by our software architecture:

Client-Side Encryption: All financial data (income streams, liabilities, expenses, life events, custom asset allocations) is encrypted locally on your device using the Web Crypto API (AES-GCM 256-bit encryption).
No Server Access to Plaintext: Your Master Encryption Key (MEK) is derived from your credentials in your browser and is never transmitted to or stored on our servers. The cloud servers only receive and store unreadable encrypted blobs (ciphertext).

2. Information We Collect

We collect only the minimum information necessary to authenticate you, provide cloud backup, and process payments:

Google OAuth Account Information: When you sign in via Google OAuth, we receive your email address, full name, and Google profile ID. This is used solely to identify your account and associate your encrypted vault.
Encrypted Vault Data: An opaque, encrypted payload containing your financial profile data. This is stored securely in our cloud database and object store (Cloudflare D1/R2).
Transactional Information: When upgrading to RetireOS Pro, payment processing is handled directly by Razorpay. We store only the Razorpay Order ID, Payment ID, purchase date, and subscription status. We never see or store your credit card numbers, debit card details, CVVs, or UPI PINs.
Technical Logs & Error Telemetry: Minimal server logs (IP address, user-agent, API request timestamps) for security rate-limiting and fraud prevention, automatically purged periodically.

3. How We Use Your Information

We use the collected information strictly for the following purposes:

To authenticate your identity and provision your RetireOS account.
To sync and backup your encrypted financial vault across your devices.
To fulfill transactions and verify Pro status.
To prevent fraudulent attacks, abuse, or denial-of-service attempts.
To provide customer support and process refund requests.

4. Data Sharing & Third Parties

We do not sell, rent, monetize, or trade your personal data with any third party or advertisers. Data is shared only with trusted infrastructure providers necessary to operate the application:

Cloudflare: For global CDN distribution, edge serverless computing, and encrypted cloud storage.
Razorpay: For secure, PCI-DSS compliant payment processing.
Google OAuth: For secure third-party single sign-on authentication.

5. Cookies & Local Storage

RetireOS uses browser LocalStorage and SessionStorage solely for functional purposes (storing authentication tokens and active session state). We do not use third-party tracking cookies or ad network trackers.

6. Data Retention & Account Deletion

You maintain full ownership of your data. You can:

Export Vault: Download a full unencrypted or encrypted copy of your financial data to your computer at any time via the Backup tab.
Delete Account: Request permanent deletion of your account and all associated encrypted cloud backups by emailing sales@hyperparameter.cloud. Your records will be purged within 30 days.

7. Grievance Officer & Contact Information

In accordance with the Indian Information Technology Act, 2000 and Rules made thereunder, the contact details of our Grievance Officer are:

Designation: Grievance Officer
Entity: Hyperparameter Technologies LLP
Email: sales@hyperparameter.cloud
Phone: +91 73000 03022
Response Time: Acknowledgment within 24 hours; resolution within 15 working days.