🔐 SecureVault — Privacy Policy

Effective date: July 2026 | Developer: Hossain Abedy

SecureVault stores all passwords locally on your device. No data is ever sent to any server.

1. What SecureVault Does

SecureVault is a local password manager for Windows. It stores your credentials in an encrypted database on your own PC using AES-256-GCM encryption. The browser extension communicates only with the SecureVault desktop app installed on the same machine — never with any external server or cloud service.

2. Data We Collect

We collect nothing. SecureVault does not collect, transmit, or share any personal data, browsing history, passwords, or usage statistics.

3. Data Storage

All data is stored exclusively on your local machine at %USERPROFILE%\.securevault\vault.db. This file is encrypted and never leaves your device.

4. Browser Permissions

The SecureVault browser extension requests the following permissions:

activeTab — to detect login forms on the current page
nativeMessaging — to communicate with the local SecureVault app
storage — to temporarily hold pending credentials across page navigations (stored locally in the browser, never transmitted)
tabs — to read the current page URL for credential matching

None of these permissions are used to collect or transmit data externally.

5. Native Messaging

The extension communicates with the SecureVault desktop application on your PC via the browser's Native Messaging API. This communication is local only — it never reaches the internet.

6. Third Parties

SecureVault does not use any third-party services, analytics, advertising networks, or external APIs.

7. Changes to This Policy

If this policy changes, the updated version will be posted at this URL with a new effective date.

8. Contact

Questions about this policy: abedy.ltu@gmail.com