Terms of Service

You absolutely, unconditionally, and without exception agree not to use the Service for:

• Any content that is illegal under any applicable law, anywhere in the world
• Child sexual abuse material (CSAM) in any form — see Section 4A
• Terrorism, terrorist financing, incitement to violence, or extremist content
• Distribution of malware, ransomware, spyware, viruses, or any harmful code
• Any content that harasses, threatens, stalks, or harms any person
• Fraud, phishing, identity theft, or social engineering attacks
• Intellectual property infringement of any kind
• Unauthorized access to computer systems or networks
• Money laundering or financing of any illegal activity
• Drug trafficking or solicitation of illegal substances
• Human trafficking or exploitation of any person
• Any violation of applicable local, national, or international law
• Circumventing, disabling, or interfering with our security measures

Violation of any prohibition constitutes an immediate, material breach of these Terms entitling us to terminate your access without notice. Where legally required, we will report violations and all available metadata to law enforcement authorities.

ScorchPad operates on a strict zero-knowledge architecture. We are technically and architecturally incapable of monitoring, reviewing, scanning, filtering, detecting, or accessing any content you share. The encrypted data stored on our servers is, from our perspective, indistinguishable from random noise. We do not possess decryption keys and cannot produce plaintext content under any circumstances.

BECAUSE WE CANNOT ACCESS YOUR CONTENT, YOU AND YOU ALONE BEAR SOLE, EXCLUSIVE, TOTAL, AND UNLIMITED CRIMINAL, CIVIL, AND LEGAL LIABILITY FOR EVERY PIECE OF CONTENT YOU ENCRYPT AND SHARE THROUGH THE SERVICE. RSAAT LABS BEARS ZERO LIABILITY — LEGAL, CIVIL, CRIMINAL, OR OTHERWISE — FOR CONTENT IT TECHNICALLY CANNOT ACCESS.

This specifically includes, without limitation:

• Child sexual abuse material (CSAM) — a criminal offence under IPC Section 67B, POCSO Act, and laws worldwide. You face criminal prosecution, imprisonment, and fines. We bear zero liability.
• Terrorism-related content — criminal offences under UAPA, NIA Act, and equivalent laws globally. You face criminal prosecution. We bear zero liability.
• Child grooming, exploitation, or trafficking content — zero tolerance, criminal offences. We bear zero liability.
• Illegal weapon instructions, drug synthesis, or violence facilitation — criminal offences. We bear zero liability.
• Any other content that is criminal, tortious, or illegal under any applicable law.

If we receive a credible, specific, actionable report identifying a particular paste ID as containing illegal content, we reserve the right to: (a) immediately delete the encrypted record from our servers; (b) report available metadata — paste ID, creation timestamp, hashed IP address — to appropriate law enforcement authorities. Deletion of the encrypted record does not constitute an admission that we accessed, verified, or were aware of its contents.

We are not a law enforcement agency. We do not proactively monitor content. We are an encrypted storage intermediary with zero visibility into stored data. Rsaat Labs claims full intermediary liability protection under Section 79 of the Information Technology Act, 2000 (India) and equivalent safe harbour provisions in other jurisdictions.

You are solely, exclusively, and entirely responsible for every piece of content you create, encrypt, and share using the Service. Your responsibility is absolute, unconditional, and unlimited. Specifically, you acknowledge and agree:

• You are the sole author and owner of all content you share, or have all necessary rights to share it
• You bear full, sole, and unlimited legal, civil, and criminal liability for your content
• We have zero ability to review, filter, moderate, or remove encrypted content
• We have zero knowledge of and zero responsibility for your content
• We are a passive technical conduit — not a publisher, editor, or host of your content
• Our provision of the Service does not constitute endorsement of, participation in, or knowledge of your content
• You will not use the Service to violate the rights of any third party
• You indemnify us against every consequence of your use of the Service

THE ZERO-KNOWLEDGE NATURE OF THE SERVICE MEANS YOUR CONTENT IS YOUR RESPONSIBILITY ALONE. FULL STOP. NO EXCEPTIONS. NO QUALIFICATIONS. NO SHARED LIABILITY WITH RSAAT LABS.

THE SERVICE IS PROVIDED "AS IS", "AS AVAILABLE", AND "WITH ALL FAULTS" WITHOUT ANY WARRANTY WHATSOEVER. TO THE ABSOLUTE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, RSAAT LABS EXPRESSLY AND COMPLETELY DISCLAIMS:

• All warranties of merchantability, fitness for a particular purpose, and non-infringement
• Any warranty that the Service will be uninterrupted, error-free, or available at any time
• Any warranty of security — encryption can be broken, systems can be compromised
• Any warranty that data will be preserved, backed up, or recoverable
• Any warranty that the Service is free of viruses, malware, or harmful components
• Any warranty that the Service meets your requirements or expectations
• Any implied or statutory warranty of any kind

NO ADVICE, INFORMATION, OR STATEMENT — ORAL OR WRITTEN — OBTAINED FROM RSAAT LABS OR THROUGH THE SERVICE SHALL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THESE TERMS.

THIS ABSOLUTE ZERO LIABILITY INCLUDES, WITHOUT LIMITATION:

• Loss of data, pastes, content, or access of any kind
• Loss of revenue, profits, business, customers, or goodwill
• Service interruptions, downtime, latency, or outages
• Unauthorized access to, interception of, or alteration of your data
• Failure of encryption or security measures
• Any conduct or content of any third party using the Service
• Any damages resulting from viruses, malware, exploits, or security vulnerabilities
• Any indirect, incidental, special, punitive, exemplary, or consequential damages of any nature
• Any claim related to illegal content created or shared by users
• Any government action, law enforcement action, or regulatory penalty
• Any claim by any third party arising from your use of the Service

WHETHER OR NOT RSAAT LABS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, AND REGARDLESS OF THE THEORY OF LIABILITY, CAUSE OF ACTION, OR BASIS OF CLAIM.

IF, DESPITE THE TOTALITY OF THE FOREGOING, ANY COURT OF COMPETENT JURISDICTION FINDS RSAAT LABS LIABLE FOR ANY MATTER WHATSOEVER, OUR TOTAL MAXIMUM CUMULATIVE AGGREGATE LIABILITY FOR ALL CLAIMS COMBINED SHALL NOT EXCEED ₹1 (ONE INDIAN RUPEE). THIS IS THE ABSOLUTE CEILING. NO EXCEPTIONS. NO NEGOTIATIONS. NO APPEALS TO EQUITY.

BY USING THE SERVICE, YOU IRREVOCABLY AND PERMANENTLY WAIVE ANY AND ALL RIGHTS TO SEEK DAMAGES, COMPENSATION, RESTITUTION, OR ANY OTHER REMEDY FROM RSAAT LABS. YOUR SOLE AND EXCLUSIVE REMEDY FOR ANY DISSATISFACTION WITH THE SERVICE IS TO IMMEDIATELY STOP USING IT.

You agree to fully, unconditionally, and permanently indemnify, defend (at your own expense), and hold harmless Rsaat Labs, its operator, and all affiliated persons from and against any and all:

• Claims, suits, proceedings, investigations, and demands of any kind
• Liabilities, obligations, losses, penalties, fines, and damages of any kind
• Costs, expenses, and legal fees (including reasonable attorney fees)
• Government or regulatory actions, investigations, or proceedings
• Third-party claims arising from your content or use of the Service
• Claims arising from your violation of these Terms or any applicable law
• Claims arising from your violation of any third-party rights

This indemnification obligation survives termination of your account and your cessation of use of the Service. It is unlimited in scope, amount, and duration.

ScorchPad is built on a zero-knowledge architecture. All encryption and decryption occurs exclusively client-side in your browser. We never possess, process, or store decryption keys. We are technically incapable of accessing the plaintext content of any paste. We bear absolutely no liability for the nature, legality, morality, or consequences of any content that passes through our systems in encrypted form.

OUR POLICY ON GOVERNMENT AND LAW ENFORCEMENT REQUESTS:

• We do not voluntarily cooperate with any government agency, law enforcement body, intelligence agency, or regulatory authority
• We do not respond to informal requests, police letters, administrative notices, verbal requests, or any communication that does not constitute valid legal process
• We do not respond to foreign government requests without a valid Mutual Legal Assistance Treaty (MLAT) process through Indian courts
• We only respond to valid orders issued by courts of competent jurisdiction in India, accompanied by proper legal process
• We actively challenge and contest orders that are overbroad, vague, disproportionate, legally deficient, or in violation of fundamental rights
• We notify affected users of legal requests before complying, unless a court explicitly prohibits such notification
• If we are legally prohibited from notifying users, our warrant canary will reflect this

In response to a valid, unchallenged, final court order we are legally compelled to comply with, we can only produce what we technically store:

• Encrypted ciphertext — indistinguishable from random noise without the decryption key, which we do not possess
• Paste metadata: expiry timestamp, view count, syntax language tag, size in bytes — no content
• Creation timestamp
• HMAC-SHA256 hashed IP address — a one-way hash that cannot be reversed to recover the original IP
• Account information (email, name) only if the user created a registered account — anonymous pastes have zero linkage

We cannot produce: plaintext content, decryption keys, URL fragments, raw IP addresses, or any data we do not possess. This is a technical impossibility, not a policy decision. No back door exists. None can be created on demand.