Privacy Policy
Effective date: 10 November 2026
Last updated: 10 November 2026
1. Who We Are
Sissare (the “Service”) is an end-to-end encrypted document storage and sharing service operated by PT. Cipta Informatika Solusindo (“we,” “us,” or “our”), a company established in Indonesia.
This Privacy Policy explains what personal information we process, why we process it, how it is stored and shared, and the choices and rights available to you. It should be read together with our Terms of Service.
For privacy questions or requests, contact support-sissare@ciptais.com.
2. Information We Process
We process the following categories of information to provide and secure the Service:
| Category | Examples | Purpose |
|---|---|---|
| Account information | Email address, account creation information, and the display name if you choose to set one | Account registration, authentication, account administration, and delivery of account-related messages |
| Public key material | Your device’s public keys, including classical and post-quantum public keys | Allows other users to encrypt document keys for you. Public keys are designed to be shared and are not private decryption keys. |
| Service and usage metadata | Last-active timestamp and information needed to associate documents, encrypted key copies, accounts, and collaboration permissions | Operating sharing and access controls, supporting succession features, enforcing plan limits, and investigating service or security issues |
| Subscription and entitlement information | Subscription tier, purchase confirmation or entitlement information from Apple or Google (including the store’s purchase token), and redeem-code usage | Activating and administering your plan and applicable limits |
| Device and session information | Push-notification registration tokens and the device platform (Android or iOS), and sign-in session records needed to keep you signed in and to revoke sessions | Delivering generic push alerts, keeping your account signed in securely, and signing out devices |
| Safety records | If you block or report another user: the account identifiers involved and the reason you select (for a report) | Letting you block users, and reviewing reports of abuse. These records never contain document content. |
| Support communications | Messages and information you choose to send to our support address | Responding to questions, requests, and complaints |
We do not receive payment-card details for purchases made through Apple App Store or Google Play. Those transactions are handled by the relevant app-store provider.
The Service does not currently use third-party analytics or crash-reporting services. We may maintain operational and security records needed to run the Service. If we introduce diagnostics, crash reporting, or other tools that materially change the information processed, we will update this Policy before or when the change takes effect, as required by applicable law.
3. Document Content and Encryption
Sissare is designed so that document content is encrypted on your device before it is uploaded. Document keys are protected separately for each authorized account or collaborator.
- We cannot read or decrypt your document content. We do not operate server-side document previews, content indexing, AI processing, or virus scanning that decrypts document contents.
- We do not store your private document-decryption keys. The Service stores public-key material and encrypted, or “wrapped,” copies of document keys needed to coordinate authorized access.
- We process limited sharing metadata. For example, the Service must associate an account with its encrypted copy of a document key and the permissions needed to operate collaboration and succession. This does not give us the ability to read the document.
- A Successor can access a document without the original owner’s device or private key. The Successor already holds their own wrapped copy of the document key. The succession process does not require us to decrypt the document or obtain the original owner’s private key.
End-to-end encryption protects document content from access by us, but it does not make all account information or service metadata invisible to us. It also does not protect content after an authorized user decrypts it on their own device or shares it outside the Service.
4. How We Use Information
We use the information described above to:
- create and administer accounts and authenticate users;
- deliver invitations and account-related, security, billing, and support messages;
- coordinate encrypted document sharing, collaborator permissions, and Successor arrangements;
- enforce storage, collaborator, file-size, and subscription limits;
- process subscription entitlements and redeem codes;
- protect the Service, investigate suspected abuse, apply rate limits, and respond to valid legal requests; and
- respond to privacy requests, support inquiries, and copyright complaints.
We do not sell personal information. We do not use document content or document metadata for targeted advertising. We do not currently run analytics or third-party crash-reporting services.
5. Legal Grounds for Processing
Where applicable law requires a legal basis, we process personal information as necessary to provide the Service and perform our agreement with you, comply with legal obligations, protect the security and integrity of the Service and our users’ accounts, and pursue legitimate interests that do not override your rights. Where consent is required, we will request it and you may withdraw it subject to applicable law.
6. Service Providers and Disclosure
We disclose or make information available only as reasonably necessary to operate the Service, comply with law, or protect rights and security. Current infrastructure and service providers include:
- Oracle Cloud Infrastructure — hosts the Sissare application and database in the Batam, Indonesia region.
- Cloudflare R2 — stores encrypted document objects. The objects are encrypted before upload; Cloudflare does not receive the plaintext document or the keys required by Sissare to decrypt it.
- Apple App Store and Google Play — process in-app purchases and provide purchase or entitlement confirmations.
- Google (Firebase Cloud Messaging) — delivers push notifications to Android devices. Google receives your device’s push registration token and the generic notification text. Notifications never contain a document, a name or a count.
- Our email service — invitations and service-related email are sent through an email service operated by us using iRedMail and the
ciptais.comdomain.
We may also disclose information if required by a valid legal process, to address an emergency involving risk of harm, to investigate abuse or security incidents, or in connection with a corporate restructuring or transfer of the Service, subject to applicable law. We cannot provide document plaintext in response to a request because we do not possess the means to decrypt it.
7. International Processing and Transfers
The application and database are hosted in Oracle Cloud’s Batam, Indonesia region. Encrypted document objects are stored using Cloudflare R2. Apple, Google, Cloudflare, and other service providers may process limited information in other locations in accordance with their services and applicable terms.
Because Sissare is available internationally, some account-related communications or service-provider processing may involve a transfer of personal information across borders. Where Indonesian law or another applicable privacy law requires safeguards or a specific transfer mechanism, we will apply the required measures. The fact that document content is encrypted does not remove our obligations concerning personal information such as account details and service metadata.
8. Retention, Account Deletion, and Document Handling
We retain account information while your account is active and for as long as reasonably necessary for the purposes described in this Policy, including legal, security, dispute-resolution, and recordkeeping obligations.
You may request account deletion. The Service applies a 30-day grace period. During this period, your account is deactivated but recoverable, and you may cancel the deletion request and restore your account, subject to the Service’s recovery process.
Before you can request deletion, the Service shows the documents you own and asks you to decide what happens to each one that has no Successor. When the grace period ends:
- Documents with a Successor transfer to that Successor, who becomes the Owner. The document, its stored encrypted file, and its storage use move with it.
- Documents with no Successor follow the choice you made for that document: leave it for the people who can still open it, or delete it for everyone. Cancelling the account deletion during the grace period withdraws that choice.
- A document you chose to leave is kept, together with its stored encrypted file, if anyone else can still open it, whether directly or through a shared folder or group. It remains encrypted and we still cannot read it. Because no new Owner is assigned, the document continues to be recorded against your deleted account’s internal identifier, together with the identifiers that tie it to the people who can open it. Your email address and display name are removed.
- A document that nobody else can open is deleted together with its stored encrypted file, because no one could read it. The same applies to a document you chose to delete for everyone.
- Your access to every other document (where you are a collaborator, not the Owner) is removed, along with your membership in groups and folders. This does not take back anything you already decrypted, and removal from a group or folder does not undo access to documents whose keys you already held.
When a document object is deleted from Cloudflare R2, it is no longer available or recoverable through the R2 API. Cloudflare does not provide us with a user-visible backup or soft-delete recovery window for these objects. We cannot verify or promise the exact time at which data is physically erased from Cloudflare’s underlying storage media.
After the grace period and completion of the document-handling workflow, we permanently delete your sessions and push-notification registrations, replace your email address with a placeholder that cannot receive mail and cannot be reversed to your address, remove your display name, and remove the account’s associated encrypted-key and access records. We deliberately keep app-store purchase records, which bind a purchase token to its account so the token cannot be claimed by someone else, subject to information we must retain by law or for legitimate security and dispute-resolution purposes. Deletion of an account or loss of all authorized key copies may make affected documents permanently unreadable. This is an important consequence of the Service’s encryption design.
9. Your Privacy Rights
Subject to applicable law, you may have the right to request access to, correction of, or deletion of your personal information; withdraw consent where processing is based on consent; request restriction of certain processing; object to certain processing; or exercise other rights provided by the law that applies to you.
To make a request, email support-sissare@ciptais.com. We may need to verify your identity and clarify the scope of your request before acting. We will respond within the period required by applicable law.
Because we cannot decrypt your documents, we cannot provide a plaintext copy of document content in response to a data-access request. You and the other authorized users control the means of decrypting document content through your respective devices and keys. This limitation does not prevent you from exercising applicable rights concerning account information and service metadata that we do process.
10. Security
Sissare is designed with technical safeguards that include:
- end-to-end encryption of document content using XChaCha20-Poly1305;
- hybrid classical and post-quantum key exchange using X25519 and ML-KEM-768 (NIST FIPS 203) for key wrapping; and
- local protection of key material using Argon2id-derived encryption.
We also apply operational and access controls intended to protect account information and the Service. If a personal data protection failure occurs, we will notify affected individuals and relevant authorities within the time and manner required by applicable law. No internet service or security measure can guarantee absolute security. You are responsible for protecting your devices, account credentials, and private keys.
11. Children’s Privacy
Sissare is intended for people 18 years of age or older. You may not create or use an account if you are under 18. If we become aware that an account has been created by someone under 18, we may take steps to suspend or delete that account in accordance with applicable law.
12. Changes to This Policy
We may update this Policy to reflect changes to the Service, our practices, or applicable law. We will provide notice of material changes through the Service or by email before the changes take effect where required by law. The updated Policy will state its effective date. Your continued use of the Service after that date is subject to the updated Policy, to the extent permitted by applicable law.
13. Contact Us
For privacy questions, data requests, or other concerns, contact:
PT. Cipta Informatika Solusindo
Email: support-sissare@ciptais.com
Indonesia