Privacy Policy

1. Overview

Vaultix is designed with a "Zero-Knowledge" architecture. This means your secrets, passwords, and notes are encrypted on your device before they are sent to our servers. We never have access to your master password or your unencrypted data.

2. Data Collection

We collect minimal data necessary to provide our service:

• Account Information: Your email address and basic profile details for authentication.
• Encrypted Data: Your secrets and vault configuration, stored in an encrypted format.
• Usage Logs: Basic technical logs (IP address, browser type) to improve security and performance.

3. Security Architecture

Our security model relies on the follow technologies:

• Argon2id: For secure master key derivation.
• XChaCha20-Poly1305: For authenticated encryption of all stored secrets.
• Ed25519/Curve25519: For identity verification and secure sharing.

4. Your Rights

You have the right to access, export, or delete your data at any time. Because your data is encrypted with a key only you hold, if you lose your master password, we cannot recover your data.

5. Data Deletion

If you wish to delete your account and all associated data, you can do so through your account settings or by visiting our Data Deletion Request page.