1. Who We Are
MEMOMES CLOUD (accessible via https://memomes.space and client applications) is an enterprise-grade cloud storage, digital content vault, and file management service that allows users to upload, store, manage, access, download, stream, and share digital files and memories through encrypted user accounts.
- Legal Entity: Sathus Technology Pvt. Ltd.
- Brand Name: MEMOMES CLOUD / MEMOMES.SPACE
- Corporate Office / Address: Plot No. 8/47, Sri Ambal Nagar Annexe, Ponni Amman Kovil St, Kedar Hospital Opp Road, Kovur, Chennai, Tamil Nadu 600128, India
- Privacy Email: privacy@memomes.space
- Grievance Officer: grievance@memomes.space
- Official Website: https://memomes.space
For all applicable personal-data processing under the Digital Personal Data Protection Act, 2023, Sathus Technology Pvt. Ltd. acts as the Data Fiduciary.
2. Information We Collect
Depending on your interaction with MEMOMES CLOUD, we collect the following categories of information:
A. Account Information
- Full Name and display identifier
- Verified Email Address
- Mobile number, where provided for authentication, OTP verification, or security recovery
- Login credentials, cryptographic salt tokens, and device authentication factors
- Account preferences, security configurations, and language settings
- Subscription tier, usage quotas, and plan allocation records
B. Uploaded Content & Files
You may upload digital content into your vault, including:
- Photographs and image assets (PNG, JPEG, HEIC, WebP, RAW)
- Video files (MP4, MKV, MOV, WebM)
- Audio recordings and voice memos (MP3, WAV, FLAC, AAC)
- Documents, spreadsheets, PDFs, and code repositories
- File names, folder hierarchies, timestamps, file sizes, and cryptographic integrity hashes
Ownership Clarification: MEMOMES CLOUD and Sathus Technology Pvt. Ltd. do not claim ownership of your uploaded content merely because you store, backup, or synchronize it using our Services.
C. Payment & Billing Information
When you subscribe to a paid storage plan, transactions are processed through authorized, RBI-compliant third-party Payment Aggregators (such as UPI AutoPay, Razorpay, or authorized Indian payment gateways). We receive:
- Transaction reference ID and order identifiers
- Payment status, payment method (UPI, Net Banking, Card type), and currency (INR ₹)
- Amount paid, GST identification number (if provided for business billing), and transaction timestamp
We do not store your complete debit/credit card numbers, CVVs, net-banking passwords, or UPI PINs on our servers.
D. Technical & Security Logs
- Internet Protocol (IP) address and approximate technical region for routing and security defenses
- Browser user-agent, operating system, and hardware platform
- Application version, build hash, and feature access timestamps
- Cryptographic audit logs, failed login attempt counters, and security anomaly records
3. Why We Use Your Information (Purpose of Processing)
We process your data strictly for legitimate and lawful purposes, including:
- Creating, maintaining, and securing your MEMOMES CLOUD vault account
- Executing client-side encrypted upload, storage, chunking, and file retrieval operations
- Streaming supported audio and video media directly in your authenticated session
- Facilitating secure, recipient-authorized file sharing links when initiated by you
- Billing, invoicing, and subscription renewals in compliance with Indian GST regulations
- Providing customer grievance redressal and technical troubleshooting support
- Preventing distributed denial-of-service (DDoS), credential stuffing, and unauthorized intrusions
- Complying with statutory directives issued under Indian law, including CERT-In cybersecurity directives
- Continually improving the durability, performance, and low-latency availability of MEMOMES CLOUD
4. Your Uploaded Content & Zero-Knowledge Architecture
Your uploaded files remain your sole property and responsibility. You warrant that you have the lawful right and necessary authority to store and transmit the content uploaded to your vault.
Under our Zero-Knowledge client-side architecture, your files are encrypted on your local device using AES-256-GCM before transmission. Encryption keys are generated client-side and remain in your browser's execution memory. We do not inspect, monetize, train AI models upon, or sell your private vault files. We process blobs solely to provide cloud replication, chunked streaming, and storage durability.
5. Sharing of Your Content
Your files are private by default and never indexable by search engines or publicly discoverable.
If you intentionally generate a shared link or ephemeral burner link, access is granted according to the security parameters you configure (such as password protection, expiration timer, single-view burn, or recipient watermark). You are solely responsible for distributing sharing links and managing permissions.
6. Third-Party Service Providers
We collaborate with infrastructure and technology partners under stringent data protection agreements, including:
- Enterprise Object Storage: High-durability data centers (e.g., Backblaze B2, AWS S3) for storing encrypted data blobs
- Edge CDN & Hosting: Edge routing and static infrastructure providers (e.g., Vercel)
- Payment Aggregators: RBI-licensed payment gateways for domestic INR payment handling
- Transactional Notifications: Indian telecom/email gateways for transactional security alerts and OTP delivery
Service providers are strictly prohibited from utilizing your data for independent commercial or advertising purposes.
7. Technical Data Security & Safeguards
In accordance with Section 8(5) of the DPDP Act, 2023 and the DPDP Rules, 2025, Sathus Technology Pvt. Ltd. implements reasonable technical and organizational security safeguards:
- Client-side AES-256-GCM authenticated encryption
- TLS 1.3 cryptographic transit protocols with HTTP Strict Transport Security (HSTS)
- Shamir Secret Sharing entropy sharding for master key recovery
- Anti-screenshot visual shields and dynamic viewer IP watermarking engines
- Role-based access controls and perimeter network isolation
8. Data Retention Policy
We retain personal data only for as long as necessary to fulfill the operational purposes for which it was gathered, or to comply with mandatory statutory obligations under Indian law:
- Active Vault Files: Retained continuously until you delete them or close your account.
- Deleted Files: Purged from operational stores immediately, with multi-region backup snapshots rotating out within standard disaster-recovery cycles (up to 30 days).
- Financial & Invoicing Records: Retained for 8 years as required under the Companies Act, 2013 and Central Goods and Services Tax (CGST) Act, 2017.
9. Account Deletion & Right to Erasure
You have the unconditional right to delete your MEMOMES CLOUD vault account at any time through the in-app Account Settings or by dispatching an erasure request to privacy@memomes.space. Upon verification, your account, stored blobs, and cryptographic indices will be permanently queued for complete destruction.
10. Your Rights under the DPDP Act, 2023
As a Data Principal under the Digital Personal Data Protection Act, 2023, you are endowed with enforceable statutory rights:
- Right to Access Information: Obtain a clear summary of your personal data being processed by us.
- Right to Correction & Updating: Rectify inaccurate, outdated, or incomplete personal data.
- Right to Erasure: Request deletion of personal data no longer necessary for the purpose collected.
- Right of Grievance Redressal: Avail of an accessible grievance redressal mechanism provided by Sathus Technology Pvt. Ltd.
- Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.
- Right to Withdraw Consent: Withdraw previously granted consent for processing where consent is the applicable basis.
To exercise any statutory right, submit your signed request to: privacy@memomes.space. We verify requestor credentials to safeguard against fraudulent impersonation.
11. Children's Privacy
MEMOMES CLOUD is intended for individuals who can legally execute a binding contract under the Indian Contract Act, 1872. We do not knowingly collect personal data from minors under 18 years of age without verifiable parental or legal guardian consent, in strict adherence to Section 9 of the DPDP Act, 2023.
12. Cookie & Local Storage Usage
MEMOMES CLOUD utilizes essential session identifiers and browser localStorage / IndexedDB solely to store your zero-knowledge encryption keys and session tokens. We do not deploy third-party advertising trackers or behavioral cross-site analytics cookies. For full details, refer to our Cookie Policy.
13. Personal Data Breach Notifications
In the unforeseen event of a personal data breach affecting our systems, Sathus Technology Pvt. Ltd. will notify the Data Protection Board of India and impacted Data Principals in the prescribed form and manner mandated under Section 8(6) of the DPDP Act, 2023 and the DPDP Rules, 2025.
14. Lawful Disclosures & Governmental Requests
We disclose data only where compelled by lawful orders issued by competent judicial authorities or authorized law enforcement agencies under valid Indian statutes (such as Section 69 of the Information Technology Act, 2000). Because files in MEMOMES CLOUD are encrypted client-side with user-held keys, encrypted blobs cannot be rendered intelligible without the user's master key.
15. Grievance Redressal Mechanism & Officer Details
In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, 2023, Sathus Technology Pvt. Ltd. has designated an official Grievance Officer:
16. Governing Law & Jurisdiction
This Privacy Policy and any disputes arising hereunder shall be governed by and construed in accordance with the substantive laws of India. Any legal action or proceeding shall be subject to the exclusive jurisdiction of the competent civil courts in Chennai, Tamil Nadu, India.
17. Updates to This Policy
We may update this Privacy Policy periodically to reflect technological changes, new feature rollouts, or regulatory guidelines notified under the DPDP Rules. All modifications become effective upon publication at https://memomes.space/privacy.