Privacy Policy

Last updated: January 3, 2026

1. Introduction

This Privacy Policy describes how we collect, use, and handle your information when you use our zero-trust authentication and access control service. We are committed to protecting your privacy and ensuring the security of your personal information.

2. Information We Collect

We collect several types of information:

2.1 Account Information

  • Email address
  • Name
  • Account credentials
  • Authentication provider information (Google, GitHub, etc.)

2.2 Access Control Data

  • Credential handles and policies
  • Access policies (ASN, IP CIDR, countries, time ranges, JA4 fingerprints)
  • Policy configurations and settings

2.3 Usage and Log Data

  • IP addresses
  • Access timestamps
  • ASN (Autonomous System Numbers)
  • JA4 TLS fingerprints
  • Geographic location data (country-level)
  • Access patterns and authentication events

2.4 Technical Information

  • Browser type and version
  • Device information
  • Operating system
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for:

  • Authentication and Authorization: To verify your identity and manage access to resources
  • Service Delivery: To provide, maintain, and improve our services
  • Security: To detect, prevent, and respond to security incidents and abuse
  • Analytics: To understand usage patterns and improve user experience
  • Communication: To send service-related notifications and updates
  • Compliance: To comply with legal obligations and enforce our policies

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your information:

  • Data is encrypted in transit using TLS/SSL
  • Passwords are hashed using industry-standard algorithms
  • Access logs are retained for security and audit purposes
  • Database access is restricted and monitored
  • Regular security assessments and updates

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • With your consent: When you explicitly authorize us to share information
  • Service providers: With third-party vendors who perform services on our behalf
  • Legal requirements: When required by law, subpoena, or legal process
  • Security and fraud prevention: To protect against security threats or fraudulent activity
  • Business transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy. Access logs are retained for security and audit purposes. When data is no longer needed, we will securely delete or anonymize it.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your information
  • Portability: Request a copy of your data in a portable format
  • Opt-out: Opt out of certain data processing activities
  • Object: Object to processing of your information

8. Cookies and Tracking

We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

9. Third-Party Services

Our service integrates with third-party authentication providers (Google, GitHub, etc.). These providers have their own privacy policies governing their collection and use of your information. We encourage you to review their privacy policies.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us.

← Back to Home