Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information (email, name)
• Authentication credentials (encrypted)
• TOTP tokens and password vault data (end-to-end encrypted)
• Device information for security purposes
• Usage data and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Authenticate your identity and prevent fraud
• Send you technical notices and security alerts
• Respond to your comments and questions
• Analyze usage patterns to improve user experience

3. Data Security

We implement industry-standard security measures to protect your data. All sensitive information is encrypted both in transit and at rest. TOTP secrets and passwords are end-to-end encrypted, meaning we cannot access your vault contents. Data is stored in secure Indian data centers complying with local regulations.

4. Data Storage and Sovereignty

All consumer data is stored within India in compliance with Indian data protection laws. We do not transfer your personal data outside of India without your explicit consent. Enterprise clients can choose their deployment location for complete data sovereignty.

5. Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances: (a) with your consent, (b) with service providers who assist our operations under strict confidentiality agreements, (c) to comply with legal obligations, or (d) to protect our rights and prevent fraud.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Object to data processing

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve user experience and analyze service usage. You can control cookies through your browser settings. Essential cookies required for service functionality cannot be disabled.

8. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Service. Your continued use after changes indicates acceptance of the updated policy.

10. Contact Us

For questions about this Privacy Policy or our data practices, contact us at [email protected]