Privacy by Design
Our privacy-first approach ensures your data stays yours, with minimal collection and maximum security
Your master password and encryption keys never leave your device
All vault data is encrypted locally before transmission
We collect only essential information to provide our service
We never sell your personal information to third parties
Detailed Privacy Information
Last updated: Aug 21, 2025
Information We Collect
- 1Account Information: Email, name, password hash, 2FA status
- 2Billing Information: Processed by payment partners, we store only references
- 3Usage Data: Minimal technical logs for security and reliability
- 4Support Communications: Messages you send for help and feedback
- 5Encrypted Vault Data: Only ciphertext, IVs, and salts (never plaintext)
How We Use Information
- 1Provide and secure the service (authentication, authorization, fraud prevention)
- 2Manage subscriptions and process payments
- 3Communicate service notices, security alerts, and support
- 4Comply with legal obligations and enforce policies
Data Security Measures
- 1Passwords stored as bcrypt hashes (never plaintext)
- 2Client-side AES-256-GCM encryption for vault data
- 3HTTPS encryption for all data in transit
- 4Regular security audits and organizational safeguards
Important Privacy Notices
Additional information about your rights and our practices
You have the right to access, update, delete, and port your data. Contact us to exercise these rights.
We retain information only as long as necessary to provide service, comply with laws, and resolve disputes.
We use only essential cookies for security and functionality. No tracking or advertising cookies.
Questions about privacy? We're here to help. Reach out to our support team anytime.