Privacy Policy

1. Introduction

XtraSecurity ("we", "our", "us", or "Company") operates the XtraSecurity platform. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

IMPORTANT DISCLAIMER: While we implement industry-standard security measures, we do not guarantee absolute protection of your data. You use XtraSecurity at your own risk. XtraSecurity shall not be liable for any unauthorized access, data breaches, or loss of personal information.

2. Information Collection

We collect several different types of information for various purposes to provide and improve our Service to you.

2.1 Personal Data

• Account Information: Name, email address, phone number, company name, and other profile information you provide
• Authentication Data: Usernames, passwords (encrypted), and multi-factor authentication details
• Credentials and Secrets: API keys, tokens, database credentials, and other sensitive information you choose to store
• Usage Data: Information about how you use the Service, including IP address, browser type, pages visited, and actions taken
• Communication Data: Messages, email communications, and support tickets you send us

2.2 Automatic Data Collection

• Log data (IP addresses, timestamps, URLs visited)
• Device information (device type, operating system, browser)
• Cookies and similar tracking technologies
• Performance and error metrics

3. Use of Data

XtraSecurity uses the collected data for various purposes:

• To provide and maintain our Service
• To notify you about changes to our Service
• To allow you to participate in interactive features of our Service
• To provide customer service and respond to your requests
• To gather analysis or valuable information so that we can improve our Service
• To monitor the usage of our Service
• To detect, prevent, and address fraud, abuse, and security issues
• To enforce compliance with our Terms and other legal agreements
• For marketing and promotional purposes (with your consent)

4. Security of Data

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

XtraSecurity implements encryption, secure authentication protocols, and access controls. However, we make no warranty regarding the complete security of your data. You acknowledge that:

• Your credentials and secrets are stored at your own risk
• Despite our security measures, breaches are possible
• We are not liable for any unauthorized access or data compromise
• You should use strong passwords and enable multi-factor authentication
• You should never share your account credentials with others

5. Data Retention

XtraSecurity will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations.

Your credentials and secrets will be retained as long as your account is active. Upon account deletion or termination, we will delete your data within 30 days, unless we are required to retain it by law or for compliance purposes.

6. Disclosure of Data

We may disclose your personal information in the following circumstances:

• By Law: When required by law, court order, or government request
• Service Providers: We may share data with third-party service providers who process it on our behalf (hosting, analytics, email delivery)
• Business Transfers: In the event of merger, acquisition, bankruptcy, or asset sale
• With Your Consent: When you explicitly authorize data sharing
• Security and Legal: To protect the rights, privacy, safety, or property of XtraSecurity, users, or the public

7. Your Data Rights

Depending on your location, you may have certain rights regarding your data:

• Access: The right to access your personal data
• Correction: The right to correct inaccurate data
• Deletion: The right to delete your data (subject to legal obligations)
• Portability: The right to receive your data in a portable format
• Opt-Out: The right to opt-out of marketing communications

To exercise these rights, please contact us at privacy@xtrasecurity.com. Please note that deleting your account will permanently delete your stored credentials and secrets, and we may not be able to recover them.

8. Cookies

We use cookies and similar tracking technologies to enhance your experience on our Service. Cookies are small files stored on your device that help us remember your preferences and track your usage.

You can control cookie settings through your browser preferences. However, disabling cookies may affect the functionality of the Service.

9. Third-Party Links and Services

Our Service may contain links to third-party websites and services that are not operated by XtraSecurity. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices.

Please review the privacy policies of any third-party services before providing them with your information.

10. Children's Privacy

Our Service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

If you believe we have collected information from a child under 13, please contact us at privacy@xtrasecurity.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Your continued use of the Service following any changes constitutes your acceptance of the updated Privacy Policy.

12. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country.

By using XtraSecurity, you consent to the transfer of your information to countries outside your country of residence, which may include countries that may not have the same level of data protection.

13. Data Breach Notification

In the event of a data breach or unauthorized access, we will notify affected users as required by law. However, XtraSecurity shall not be liable for any damages resulting from such breach.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: