Privacy Policy

We collect minimal information necessary to provide our secure messaging service. This includes your email address for account creation, encrypted message content that we cannot decrypt, and technical data such as IP addresses and device information for security monitoring. We use zero-knowledge architecture, meaning your message content is encrypted on your device before transmission and we cannot access the decrypted content. We do not collect personal information beyond what is necessary for service operation and security.

The information we collect is used solely to provide and improve our secure messaging service. Your email address is used for account management and security notifications. Technical data helps us maintain service reliability and detect potential security threats. We never use your data for advertising, marketing to third parties, or any purpose unrelated to providing secure communication services. Your encrypted messages are automatically deleted according to your specified retention settings.

All data is stored using industry-leading security measures including AES-256 encryption at rest and in transit. Our servers are located in secure data centers with physical and digital access controls. Message content is encrypted using keys that only you and your recipient possess, ensuring we cannot decrypt your communications even if compelled to do so. We maintain minimal logs necessary for security monitoring and automatically purge data according to our retention policies.

You have the right to access, modify, or delete your personal information at any time. You can request a copy of the data we have about you, though due to our zero-knowledge architecture, this will be limited to account information and metadata. You may delete your account and all associated data through your account settings or by contacting us. We will respond to all privacy-related requests within 30 days and provide clear information about any data we maintain.

We use select third-party services for essential operations such as payment processing and infrastructure hosting. These partners are carefully vetted and bound by strict confidentiality agreements. We do not share your personal information with third parties for marketing or advertising purposes. Any third-party integrations are designed to maintain the same level of privacy protection as our core service, and we regularly audit these relationships to ensure continued compliance.

We implement multiple layers of security to protect your information, including military-grade encryption, regular security audits, penetration testing, and continuous monitoring for threats. Our security team includes certified cybersecurity professionals who maintain industry certifications and stay current with emerging threats. We use secure coding practices, regular vulnerability assessments, and incident response procedures to ensure the highest level of data protection.

Our service is not intended for users under the age of 13, and we do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will take immediate steps to delete such information and terminate the account. Parents or guardians who believe their child has provided personal information to us should contact us immediately so we can take appropriate action.

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify users of significant changes through email or prominent notices on our website at least 30 days before the changes take effect. Continued use of our service after policy updates constitutes acceptance of the revised terms. We encourage users to review this policy regularly to stay informed about how we protect their privacy.