Privacy

1. What we process

Account identity (via Clerk), organization membership, project metadata, encrypted secret payloads, and audit events (who revealed or mutated a secret). We do not use vault contents for advertising.

2. Processors

• Clerk — authentication and organizations
• Neon — Postgres database
• Vercel — hosting, analytics, edge delivery

3. Legal basis

Processing is necessary to provide the vault (contract / legitimate interest for security logging). Users may request access, rectification, or deletion of their account data by contacting GoLife AB, subject to security and retention needs for audit trails.

4. Retention

Account and vault data are retained while the invitation remains active. Encrypted secrets are deleted when you delete them or when the project/org is removed. Audit records may be retained longer for security.

5. Contact

GoLife AB — privacy inquiries regarding Hylsa.