At KeyEnv, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address
Name (optional)
Profile picture (if you sign up via OAuth)
Authentication provider information (e.g., Google, GitHub)

1.2 Usage Data

We automatically collect certain information when you use our service:

IP address and approximate location
Browser type and version
Operating system
Pages visited and features used
Time and date of visits
API request logs (excluding secret values)

1.3 Your Secrets

Important: KeyEnv uses end-to-end encryption. Your secrets are encrypted on your device before being transmitted to our servers. We cannot read, access, or decrypt your secret values. We only store:

Encrypted secret data (which we cannot decrypt)
Secret names/keys (unencrypted, for search functionality)
Metadata (creation date, last modified, environment)

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process transactions and send related information
Send administrative information (updates, security alerts)
Respond to your comments, questions, and support requests
Monitor and analyze usage patterns to improve user experience
Detect, prevent, and address technical issues and fraud
Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: We use third-party services for hosting, analytics, payment processing, and customer support. These providers have access only to the information necessary to perform their functions.
Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.
With Your Consent: We may share information with your explicit consent.

4. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time. Certain information may be retained for legal compliance, dispute resolution, or enforcement of agreements.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

End-to-end encryption for all secrets (AES-256-GCM)
TLS encryption for all data in transit
Encryption at rest for all stored data
Regular security audits and penetration testing
Access controls and authentication requirements

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request your data in a portable format
Objection: Object to certain processing of your data
Restriction: Request restriction of processing

To exercise these rights, please contact us at [email protected].

7. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by relevant authorities.

8. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email.

10. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: [email protected]
Address: KeyEnv Inc.