Security

Charcha is designed to keep personal, family, and friends-space data private through authenticated access, role-based space membership, and encrypted transport in production.

How to protect your account

• Use a unique password and protect the device where you use Charcha.
• Invite only people you trust and review active space membership regularly.
• Share documents and personal information only with the intended space.
• Never send passwords, one-time codes, payment details, or document images by email or chat.

Responsible disclosure

If you believe you have found a security vulnerability, email support@charcha.co.in with the subject “Charcha security report.” Include a clear description and safe reproduction steps. Please do not access other users' data, disrupt the service, use automated attacks, or publicly disclose an issue before we have had a reasonable opportunity to investigate it.

Incident communication

If we confirm a security incident that requires notification, we will communicate through appropriate channels based on the nature of the incident and applicable requirements.