KucLab Drive is a secure, client-side encrypted **Zero-Knowledge Storage** application. All data, files, and directory structures are encrypted in your browser using **AES-256-GCM** before upload. Decryption occurs strictly on your device. The server only holds encrypted data and never sees your password or decryption keys.
Last Updated: June 2026
Welcome to KucLab Drive. By using our services, you agree to comply with and be bound by the following Terms of Service. If you do not agree, please do not use the platform.
1. Nature of the Service (Zero-Knowledge Architecture)
Client-Side Encryption: KucLab Drive is a secure, Zero-Knowledge storage application. All data, files, directory structures, and metadata are encrypted directly in your browser using AES-256-GCM before being uploaded. Before the upload occurs, data is compressed and sanitized on the client side to ensure the maximum possible web-based security.
No Server-Side Access: The server strictly holds encrypted data ("encrypted noise"). The operator does not have, cannot have, and will never have access to your unencrypted data, master passwords, decryption keys, or Vault JSON files.
2. User Responsibility (Password Recovery)
⚠️ CRITICAL WARNING: Due to the Zero-Knowledge nature of the platform, it is impossible for us to recover, reset, or regenerate your password or keys. If you lose your password or your Secure Vault JSON key file, your data is permanently unrecoverable. The operator cannot assist you in recovering lost access.
3. Content Liability and Legal Autonomy
Absolute Privacy and Server Blindness: Due to the technical architecture of the platform (Zero-Knowledge), the operator has no technical means, capability, or right to decrypt, view, moderate, or audit the data stored by users. The server only hosts encrypted data blocks with zero context.
Sole User Responsibility: The user uploads and shares any content entirely at their own risk and remains its sole legal custodian. The operator has no knowledge or awareness of the nature of the stored data. You are solely responsible for maintaining the confidentiality of your credentials (enabling TOTP 2FA is highly recommended) and for any shared links you generate.
Legal Liability Safe Harbor: Any violation of applicable laws (including copyright laws or local jurisdictions) by uploading specific content is fully and exclusively the legal responsibility of the user. The operator shall not be held liable for unlawful conduct by users, as the underlying technology prevents the operator from detecting or preventing such activities.
Cooperation with Law Enforcement: In the event of a legitimate request from law enforcement or government authorities, the operator will fully cooperate. However, users acknowledge that the operator can only provide encrypted data (unreadable noise) to authorities, as the operator does not possess or store the decryption keys.
4. Limitation of Liability
The service is provided on an "as is" and "as available" basis. While the platform utilizes the maximum possible web security, the operator shall not be liable for any data loss resulting from hardware/software failure on your side or the loss of your encryption keys.