Draft privacy notice
Privacy documentation is not yet production-approved.
This development notice describes the intended data boundary; counsel and the owner must approve a jurisdiction-specific notice before launch.
Vault content
The intended service receives encrypted item and attachment payloads, wrapped keys, identifiers, versions, and sync metadata—not decrypted vault fields.
Account and operations data
Email authority, passkey credential metadata, device/session metadata, abuse-control pseudonyms, entitlement state, and safe audit events are operational data.
Open work
Lawful basis, retention, deletion, processors, international transfers, analytics, cookies, children, and data-subject workflows remain legal and operational release gates.