In short
- Your passwords, notes, item titles, addresses, usernames and SMS contents are encrypted on your device; we cannot read them.
- To provide the service we process member names, e-mail addresses, roles, IP addresses, device details and access records.
- We do not sell your data and do not use it for advertising or profiling.
- There are no third-party analytics or trackers on this site or in the app.
Roles
The customer organisation is the data controller for its employees' data; [Company name] is the data processor for that data. For our own customer and billing records, we are the data controller.
Data we process
- Account data: name, e-mail, role, status, language.
- Security data: IP address, browser and device details, sessions, sign-in attempts.
- Usage records: who accessed which item, when and for what purpose; the audit log. These are the product's function (access map, offboarding).
- Encrypted content: vault and code inbox contents; being encrypted, we do not know what they hold.
- Billing: organisation name, tax details, billing address.
Retention
Data is kept for the duration of the service. When an organisation is closed, its data is permanently deleted after 30 days and drops out of backups within 35 days. The audit log is not deleted during the service.
Transfers
The cloud service is hosted in Türkiye. Data sent to outside services such as e-mail delivery and mobile push is kept to a minimum and listed in the data protection notice; notifications never contain codes or item names.
Your rights
Requests about your personal data are handled through your organisation's administrator. You can also write to us directly at [email protected].
Contact
[Company name] · [Company address] · [email protected]