Home Privacy Policy

Privacy Policy

Last updated: January 1, 2026

This is an English translation provided for convenience. In case of any conflict or ambiguity between this translation and the original French version, the French version prevails and is the only legally binding one.
Encryvault is built with a Zero-Knowledge architecture: we never have access to your passwords or your encrypted data.

1. Data controller

The controller responsible for processing personal data is:

Zynora

4 Rue Chanoine Guillaume, 54530 Pagny-sur-Moselle, France

Email: dpo@encryvault.com

2. Data we collect

We distinguish between two categories of data:

Account data (readable by Encryvault)

  • • Email address and name
  • • Billing and transaction information
  • • IP address and connection logs
  • • Anonymized usage data

Encrypted data (inaccessible to Encryvault)

  • • Stored passwords
  • • Secure notes
  • • Credentials and associated URLs

This data is encrypted client-side before any transmission. Encryvault has no access to it whatsoever.

3. Purposes of processing

Purpose Data concerned
Providing the ServiceEmail, connection data
Subscription managementBilling data
Customer supportEmail, exchange history
Security and fraud preventionIP address, logs
Service improvementAnonymized usage data
Communications (with consent)Email

4. Legal basis

In accordance with the GDPR, our processing relies on the following legal bases:

  • Contract performance: to provide the Service you ordered
  • Legitimate interest: security, fraud prevention, Service improvement
  • Consent: marketing communications and analytics cookies
  • Legal obligation: retention of accounting records

5. Retention period

Data Duration
Active account dataDuration of the contractual relationship
Data after account closure30 days, then permanently deleted
Billing data10 years (legal obligation)
Security logs12 months
Analytics data25 months

6. Your rights

In accordance with the GDPR, you have the following rights:

Right of access

Obtain a copy of your personal data.

Right of rectification

Correct inaccurate data about you.

Right to erasure

Request deletion of your data.

Portability

Receive your data in a structured format.

To exercise your rights, contact our DPO: dpo@encryvault.com. You also have the right to lodge a complaint with the CNIL (the French data protection authority).

7. Cookies

We use cookies to operate the Service and to measure audience. To learn more, see our Cookie Policy.

8. International transfers

Data is hosted on servers located in the European Union (France) by OVHcloud, GDPR-compliant. No transfer to countries outside the EU is made without appropriate safeguards.

Some subprocessors (payment, analytics) may be established outside the EU. In that case, we ensure that Standard Contractual Clauses approved by the European Commission are in place.

9. DPO contact

Our Data Protection Officer (DPO) is available for any question relating to the protection of your data:

Encryvault DPO

Email: dpo@encryvault.com

Address: 4 Rue Chanoine Guillaume, 54530 Pagny-sur-Moselle, France

Maximum response time: 30 days (in accordance with the GDPR).

10. California residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, grants you additional rights over the personal information described in this policy:

  • The right to know what personal information we collect, use, and disclose about you
  • The right to delete personal information we hold about you, subject to certain exceptions
  • The right to correct inaccurate personal information
  • The right to non-discrimination for exercising any of these rights

Encryvault does not sell or share personal information, as those terms are defined by the CCPA/CPRA. To exercise any of the rights above, contact dpo@encryvault.com; we will respond within the timeframe required by California law.