Effective Date: May 23, 2026

1. Introduction

StoreforAges (OPC) Private Limited (“SforA”, “we”, “our”, or “us”) provides long-term secure digital storage, preservation, retrieval, and management services for personal images, videos, documents, and related digital assets.

This Privacy Policy explains:

• What information we collect 
• How we use and protect your information 
• How payment and authentication are handled 
• Your rights regarding your data 
• How data is retained and deleted 

By using SforA services, applications, websites, or integrations, you agree to this Privacy Policy.

2. Information We Collect

SforA may collect and process the following categories of information.

A. Personal Information

• Full name 
• Email address 
• Phone number 
• Login credentials 
• Encrypted password information 
• Profile details 

B. Payment and Billing Information

Depending on the payment method selected:

• UPI details 
• Credit card information 
• Debit card information 
• Billing plan and subscription details 
• Transaction history 
• Payment status 

Recurring billing information may be securely stored through authorized payment processors for subscription continuity.

SforA does not store raw card CVV numbers.

3. Google Login Integration

SforA may provide login access through Google authentication integration.

When users sign in using Google:

• SforA may receive limited profile information from Google 
• This may include: 
  • Name 
  • Email address 
  • Profile identifier 
  • Authentication token 

SforA only uses this information for:

• Account creation 
• Authentication 
• Account recovery 
• Service access management 

SforA does not access user Gmail content, Google Drive files, contacts, or unrelated Google account data unless explicitly authorized by the user.

4. Website and Application Technical Data

SforA systems may temporarily collect technical information including:

• Cache data 
• Session identifiers 
• Browser information 
• Device information 
• IP address 
• Application logs 
• Authentication logs 
• Error and diagnostic information 

This information is used for:

• Security monitoring 
• Fraud prevention 
• Performance optimization 
• Session management 
• Troubleshooting

5. User Content and Stored Data

Users may upload:

• Images 
• Videos 
• Documents 
• Folder structures 
• Metadata 

SforA acts as a secure storage provider for user content.

Ownership of uploaded data remains with the user.

6. Data Encryption and Security

SforA implements security controls including:

• Encryption in transit 
• Encryption at rest 
• Secure authentication mechanisms 
• Access control restrictions 
• Audit logging 
• Multi-layer infrastructure protection 

SforA is designed so that:

• Only the user device or authorized SfA application can interpret the encryption key structure 
• Downloaded raw storage objects without proper authentication or decryption mechanisms may remain unreadable 

SforA continuously works to improve data security protections, but no system can guarantee absolute security.

7. AI and Third-Party Data Usage Restrictions

SforA will NOT:

• Use user raw data for AI model training 
• Use uploaded files for machine learning datasets 
• Sell user content 
• Share user content with advertisers 
• Share private user files with third-party applications without user authorization 

User data remains private and isolated within authorized SforA environments.

8. Third-Party Services

SforA may integrate with authorized third-party services including:

• Payment gateways 
• Cloud infrastructure providers - Wasabi and Amazon S3 Glacier
• Authentication providers 
• Security monitoring systems 

These providers are contractually required to maintain reasonable security and confidentiality protections.

9. Data Retention

SforA retains data:

• During active subscription periods 
• During suspension or billing grace periods 
• During legal or audit retention periods 
• During deletion verification workflows 

Retention timelines are further described in the Terms of Service.

10. User Rights

Users may request:

• Account access 
• Correction of information 
• Account deletion 
• Subscription cancellation 
• Data export where technically feasible 

Requests may be subject to:

• Identity verification 
• Legal obligations 
• Security validation 

11. Account and Data Deletion

When an account deletion request is completed:

• User identifiers may be removed from production systems 
• Authentication access may be revoked 
• Cached references may be cleared 
• Storage references and indexing records may be removed 
• Data deletion verification workflows may be initiated 

Certain logs or audit records may be retained where required by law, fraud prevention, or security obligations.

12. Compliance and Legal Requests

SforA may disclose information if required by:

• Applicable law 
• Court order 
• Government request 
• Fraud investigation 
• Security incident investigation 

Only legally required information will be disclosed.

13. Children’s Privacy

SforA services are not intended for users below the legally permitted age in their jurisdiction without parental or guardian consent.

14. Policy Updates

SforA may update this Privacy Policy periodically.

Updated versions will be published on the SforA website with revised effective dates.

15. Contact Information

For privacy or security concerns, users may contact:

SforA Privacy Team
Email: privacy@storeforages.com
Website: www.storeforages.com