At-A-Glance Security Summary
Zero-Knowledge Design
We cannot read or access your files under any circumstances.
End-to-End Encryption
AES-256-GCM secures payload and manifest integrity client-side.
Local Encryption First
Files are encrypted before leaving your physical local drive.
No Third-Party Ads
No advertisements, ad libraries, or tracking SDKs inside our app.
No Data Sale
We never monetize or trade your personal usage details.
User Controlled Keys
Keys stay in your possession, protected by local permissions.
Data Collection Transparency Table
To ensure total clarity for both users and Microsoft Store reviewers, we outline our complete data model in the matrix below:
| Data Type | Collected | Purpose | Shared |
|---|---|---|---|
| File Contents | No | N/A (Fully encrypted client-side) | No |
| Encryption Keys | No | N/A (Remain under user's exclusive control) | No |
| File Metadata | Yes (Stored Locally Only) | Required to manage encrypted files, manifests, integrity verification, and recovery. | No |
| Device Information | Yes (Processed Locally Only) | Required for peer discovery, secure networking, and application functionality. | No |
| Crash Reports | Conditional | Voluntary manual submission for debugging | No |
| Support Emails | Yes | Responding to user-initiated service queries | No |
| Website Analytics | No | N/A | No |
| Cookies | Yes | Essential website functionality & theme selection | No |
Note on Local Processing: Some information, such as device identifiers, encrypted file metadata, and networking information, may be processed locally by MeshVault to provide its functionality. This information remains under the user's control and is not transmitted to Hagaratagi Technologies.
1. Introduction
Welcome to Hagaratagi Technologies. We develop secure, decentralized software systems. Our flagship desktop storage application is **MeshVault**. This Privacy Policy explains our practices regarding data collection and privacy protections. It applies to both the MeshVault desktop program and our official website, hagaratagitechnology.com.
We believe that you should have absolute control over your digital properties. This policy is written in plain, straightforward English to help you understand exactly what we do—and more importantly, what we do not do—with your data.
2. Information We Collect
We do not collect any personal data through the MeshVault desktop application. We only collect the minimal amount of details necessary to run our public website and provide technical customer support:
- Customer Support Inquiries: If you voluntarily send an email to support@hagaratagitechnology.com, we collect your email address, your name, and any specific details you include in your message to help resolve your issue.
- Website Connectivity Logs: When you access our website, our server logs basic technical information. This includes your IP address, browser type, referring page, and page access timestamps. We use this strictly to secure and optimize website loading speeds.
3. Information We Do NOT Collect
Due to our software's decentralized architecture, Hagaratagi Technologies does not have access to, collect, or store the following items:
- File Contents: Your files are never uploaded to our servers. All encryption occurs locally on your own computer. We cannot read or access your files under any circumstances.
- Encryption Keys: We do not generate, view, or store your private cryptographic keys. Keys remain entirely on your own devices. If you lose your keys, we cannot recover them or decrypt your files.
- File Metadata: File sizes, names, directory structures, and checksums are kept entirely inside client-side manifest files. They are never transmitted to us.
- Location & Device Tracking: The application does not track your physical location or gather technical device telemetry.
4. How MeshVault Works
MeshVault is a decentralized, peer-to-peer (P2P) storage application. Instead of uploading your data to a centralized cloud datacenter, MeshVault divides your files into small, encrypted chunks. These chunks are stored on your local hard drive and replicated across other trusted devices (such as your secondary laptop or office computer) that you explicitly pair and authorize.
All data distribution occurs directly between your paired devices. Hagaratagi Technologies does not operate intermediate staging servers or hosting relays for your files.
5. Local Storage
MeshVault stores all program configurations, encrypted file chunks, and Ed25519 node identities locally on your computer's storage drive. On Windows, local folders are secured using explicit NTFS access control rules. This restricts reading and writing privileges strictly to the active Windows User Security Identifier (SID), preventing other local user accounts from accessing your encrypted assets.
6. Encryption & Security
Security is the foundation of MeshVault. We use robust, industry-standard cryptographic algorithms to protect your information:
- Payload Encryption: All files are encrypted client-side using hardware-accelerated **AES-256-GCM** authenticated encryption before transmission.
- Key Derivation: Keys are derived using PBKDF2-HMAC-SHA256 and stretched using cryptographically secure HKDF protocols.
- Memory Protection: Symmetric encryption keys and session tokens are scrubbed and cleared from your computer's RAM immediately after cryptographic processing.
7. Peer-to-Peer Networking
MeshVault devices coordinate directly with one another. To connect, nodes discover each other dynamically over the local subnet. Once discovered, they form encrypted transport channels using strictly enforced **TLS 1.3** security protocols. Peer connections negotiate handshakes using unique, asymmetric **Ed25519** node key fingerprints to prevent interception or session relay attacks.
Local discovery is conducted on UDP port 5670, and data transfers are handled over TCP port 5671. No traffic or file routing goes through servers owned by Hagaratagi Technologies.
8. File Metadata
File metadata—such as filenames, directory relationships, chunk indexes, and integrity validation hashes—is written to a local database manifest file on your node. To prevent local modifications or malicious code injection, MeshVault validates manifests on startup using **RSA-2048 PKCS#1 v1.5** signatures, terminating the application immediately if any tampering is detected.
Hagaratagi Technologies does not host, mirror, or collect this metadata. It is entirely user-controlled and distributed directly among your own trusted devices.
9. Analytics
We do not track you. MeshVault has **no analytics libraries, tracking pixels, or automated crash telemetry SDKs**. The desktop application does not run background processes to monitor user behavior or report feature usage patterns.
If you experience a system failure, you may voluntarily retrieve the local diagnostic logs from your device's application directory and email them to support for manual debugging. These logs contain purely technical runtime parameters and never contain file payloads or key details.
10. Microsoft Store Compliance
This Privacy Policy is designed to satisfy the developer publishing guidelines of the Microsoft Store for desktop applications. We explicitly state the actual behavior of our application so that Windows Store reviewers can verify our compliance:
- No Advertising SDKs: MeshVault is completely ad-free. No advertising frameworks are packaged with our binaries.
- No Sale of Personal Details: We do not track, profile, or sell information about our users.
- No Unannounced Network Traffic: Network ports (UDP 5670 and TCP 5671) are used strictly for local peer communication and are transparently declared in your system's Windows Firewall rules.
11. Third-Party Services
We do not integrate third-party analytical trackers, software frameworks, or cloud database managers into our system architecture. Support links on our website use basic email handlers (mailto) to open your default system mail client. We do not share your support email address or messages with any external third-party marketing services.
12. Cookies (Website only)
Our desktop application does not use cookies. Our official website uses local storage parameters to retain user theme selections (Light Mode, Dark Mode, or System settings) for website navigation. We do not use cookies to track user behavior across other sites or serve targeted ads.
13. Children's Privacy
Our website and the MeshVault application are intended for general audiences and are not directed to children under 13. We do not knowingly collect personal information from children. If we discover that a child under 13 has emailed our support desk, we will take immediate steps to permanently delete the correspondence from our email servers.
14. Data Retention
Because we do not collect your files, keys, or app usage details, we have no user data to retain. For customer support emails sent to support@hagaratagitechnology.com, we retain the correspondence history for a maximum of 12 months. This allows us to provide follow-up assistance before deleting the records from our support system.
15. User Rights
Depending on your jurisdiction (such as the European Economic Area under GDPR or California under the CCPA), you have legal rights regarding your personal information. These include the right to access, correct, copy, or request the deletion of the support emails or correspondence records we hold about you. You can exercise these rights at any time by contacting our privacy officer.
16. Data Deletion
If you wish to request the permanent deletion of your customer support emails, contact history, or website logs, please submit a deletion request to support@hagaratagitechnology.com. We will verify your identity and process the deletion within 30 days of receiving your request.
17. Security Measures
We use appropriate technical security safeguards. Our website enforces secure HTTPS/TLS encryption. Additionally, our application installation binaries are verified using cryptographic signatures to prevent man-in-the-middle file modifications during your download process. We audit our web servers regularly to prevent unauthorized access.
18. International Users
Hagaratagi Technologies is headquartered in India. Website connection logs and support email communications are transferred, stored, and processed in India. By using our website or emailing our support channels, you acknowledge and consent to this processing. We protect this data in accordance with the security standards outlined in this policy.
19. Changes to this Privacy Policy
We may update this Privacy Policy to reflect modifications in our software behavior or updates to legal guidelines. If we make changes, we will adjust the "Last Updated" date and the Version identifier at the top of this page. We encourage you to review this page periodically to stay informed about our privacy practices.
20. Contact Information
This Privacy Policy describes the current behavior of MeshVault. Hagaratagi Technologies does not intentionally collect information beyond what is described in this document.
For questions or support regarding this Privacy Policy or your data rights, please contact Hagaratagi Technologies through our official cards below.
Frequently Asked Questions
Common questions about security, data storage, and compliance in MeshVault: