Privacy Policy

1. Zero Knowledge & Data Minimization

Chamando.eu is engineered in strict compliance with the European General Data Protection Regulation (GDPR - Regulation EU 2016/679) and DMA Article 7 architectural security guidelines. We operate on a strict Zero Knowledge principle:

• We never store plaintext messages, audio recordings, images, or documents on relay servers.
• Transiting payloads are encrypted end-to-end via the Signal Protocol and are immediately discarded from memory once delivered.
• No behavioral profiling, ad tracking, or commercial telemetry is gathered or monetized.

2. Cryptographic PreKeys & Identity Storage

To enable asynchronous messaging across gatekeepers, Chamando.eu temporarily hosts public cryptographic PreKey bundles (Identity Key, Signed PreKey, and One-Time PreKeys) as specified by the Signal Protocol specification. Private identity keys remain exclusively on the user's client device and are never transmitted to our infrastructure.

3. E.164 Routing & Directory Services

Phone numbers are processed solely for contact discovery, cryptographic registration, and route validation. Users have the right to revoke session tokens, unregister their phone numbers, and erase all associated public PreKey bundles at any moment directly through the client interface.

4. GDPR Rights (EEA Data Subjects)

Under GDPR, EEA users maintain the right to access, rectify, or demand erasure of any associated directory records. Because messages are strictly end-to-end encrypted, Chamando.eu does not possess plaintext records to produce or subpoena.

5. Data Protection Officer (DPO)

For privacy inquiries or to exercise statutory rights, contact our Data Protection desk at privacy@chamando.eu.