1. Introduction
Welcome to SecureStash. We are committed to protecting your privacy and handling your data in an open and transparent manner. This privacy policy sets out how we collect, use, and protect any information that you give us when you use this application.
2. Data We Collect
We may collect the following information:
- Account Information: When you register for an account, we collect your name, email address, and password (which is hashed).
- Vault Data: All data you store in your vault, such as passwords, secure notes, documents, and recovery phrases, is end-to-end encrypted. We cannot access or read this information. The encrypted data is stored on our servers.
- Usage Data: We may collect information about how you use our services, such as access times, features used, and other statistical data to improve our service. This data is anonymized wherever possible.
- Device Information: For security purposes, such as when you enable biometrics (WebAuthn), we store information about the registered device.
3. How We Use Your Data
We use the information we collect for the following purposes:
- To provide, operate, and maintain our services.
- To improve, personalize, and expand our services.
- To understand and analyze how you use our services.
- To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the website, and for marketing and promotional purposes.
- To process your transactions and manage your account.
- For compliance purposes, including enforcing our Terms of Service, or other legal rights.
4. Data Security
We are committed to ensuring that your information is secure. Your vault data is encrypted on your device before it is sent to our servers using strong encryption protocols. This means we never have access to your unencrypted data. We also use various security measures to protect your account information.
5. Data Sharing and Disclosure
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. As your vault data is encrypted, we cannot share it with anyone. We may share anonymized usage data with third-party services that help us operate our application and analyze usage.
6. Your Data Rights
You have the right to access, update, or delete the information we have on you. Within your account settings, you can delete your entire vault, which will permanently remove all your data from our servers.
7. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at devhooks.in@gmail.com.