Privacy Policy

1. Definitions

• Personal Information: information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.
• Service: Namirasoft Password, including its web console and browser extension.
• Namirasoft Services (the ecosystem): the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you across Namirasoft Services.
• Master password: the password you choose to unlock your vault, which only you know and which is never sent to or stored by Namirasoft.
• Entry: an item you save, such as a login, made up of the fields you add to it.
• Sensitive value: a field within an entry that you mark or that the Service treats as secret, such as a password, which is stored only in encrypted form.
• Vault: your collection of entries, protected by your master password.
• Workspace: the Namirasoft Workspace an entry belongs to, used to organize and separate your entries.

2. Namirasoft Account

Namirasoft Password relies on Namirasoft Account for authentication. When you sign in, Namirasoft Account provides the Service with the identifiers it needs to associate your vault with you and show you your own records. The collection and handling of your registration details, sign-in credentials, and profile are governed by the Namirasoft Account Privacy Policy. Your Namirasoft Account sign-in is separate from your master password: signing in to your account lets you reach your vault, but your entries can only be unlocked with your master password.

3. Information We Collect

Namirasoft Password is built to hold your vault in encrypted form and only the additional information it needs to operate. We collect:

• Account identifiers received from Namirasoft Account, used to associate your vault with you and show you your own records.
• Your entries, including the fields you add and the sensitive values you store in them, such as passwords. The sensitive values are encrypted with a key derived from your master password before they are stored, so Namirasoft holds them only as encrypted data.
• Organizational details you use to manage and find your entries, such as the name you give an entry, the website or application it is for, any description, and any templates, categories, tags, or field values you add, together with the Workspace an entry belongs to.
• Your encrypted account key, the encrypted data the Service stores so that your vault can be unlocked with your master password on your device. This is stored only in encrypted form.
• Your recovery setup, including the recovery questions you choose when you create your master password and additional encrypted copies of your account key that let you regain access if you forget your master password. Your answers to the recovery questions are used only on your device and are not sent to or stored by Namirasoft.

4. Information We Do Not Collect

Because of how the Service is built, Namirasoft Password does not:

• collect or store your master password, which is never saved or transmitted to Namirasoft, or the key derived from it;
• have the ability to decrypt, read, or recover the sensitive values you store, such as your passwords, because they are encrypted with a key only you hold through your master password or your recovery answers;
• collect or store your answers to your recovery questions, which are used only on your device to unlock a backup copy of your account key;
• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account; and
• use your entries to build an advertising profile, and it does not sell your information.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for certain security, fraud-prevention, legal, or business purposes, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal-basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above solely to: store and synchronize your encrypted vault across your devices; let you create, organize, generate, and fill your entries; match a saved login to the website or application you are visiting so the browser extension can offer to fill it on your device; apply your Workspace and settings; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We cannot and do not read the sensitive values you store, and we do not use your entries for advertising.

8. Automated Decision-Making

Namirasoft Password stores and synchronizes your encrypted vault and helps you fill your entries where you choose. It does not make decisions that produce legal or similarly significant effects about you through automated processing, and it does not profile you or take automated actions on your behalf beyond the password-management features you use.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• Within Namirasoft Services where needed to operate the Service and apply your Workspace and settings;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• With your direction, where you choose to export or share your own entries.

Because the sensitive values you store are encrypted with a key only you hold, Namirasoft cannot disclose them in a readable form, including in response to a legal request; we can only provide the encrypted data we hold.

10. International Transfers

Namirasoft operates from Canada and may process and store information in Canada and in other countries where we or our service providers operate. Where information is transferred across borders, we take steps to protect it with appropriate safeguards and in accordance with applicable law. By using the Service, you understand that your information may be processed in countries other than the one in which you reside, which may have different data protection rules, and we apply appropriate safeguards to protect your information where required. Your sensitive values remain encrypted wherever they are stored.

11. Data Security

Security is central to Namirasoft Password. The sensitive values you store are encrypted with a key derived from your master password, and your master password is never saved or transmitted to Namirasoft, so only you can unlock your vault. The Service is built on zero-knowledge and zero-trust principles across the web console and the browser extension, and its source code is published to support transparency. We also apply measures such as access controls, authentication protections, encryption in transit, network protections, monitoring, and logging, and we restrict access to information to those who need it to operate and support the Service. If you forget your master password, you can regain access using the recovery questions you set up when you created it. Recovery happens on your device: your answers unlock a backup copy of your account key that only you can produce, and Namirasoft stores your recovery questions and encrypted backup copies but never your answers, so recovery does not give Namirasoft the ability to read your entries. Your master password and recovery details are the only keys that unlock your encrypted vault, so keeping them safe is essential.

12. Data Security Incidents and Breach Notification

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law. Even in the event of an incident, the sensitive values you store remain encrypted and can only be unlocked with your master password or your recovery answers, which we never hold.

13. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Password keeps your encrypted vault and its details for as long as your Namirasoft Account exists, or as needed to provide the Service, so that your entries remain available to you. You can delete an entry, or your whole vault, at any time. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete an entry, or when your vault is removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

14. Data Integrity and Responsibility

You decide what to store in your vault, and you are responsible for your entries and for keeping your master password safe. Namirasoft Password stores and synchronizes your encrypted vault as you direct. Because the sensitive values you store are encrypted with a key only you hold, you are the only person who can read them, and their accuracy and content are under your control.

15. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view, manage, and export your entries in the Service at any time using your master password. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Note that Namirasoft cannot provide the sensitive values you store in a readable form, because only you can decrypt them. For identity and account rights, use Namirasoft Account.

To make a request, you can contact us through support.namirasoft.com or by email at accounts@namirasoft.com, and to protect your information we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

16. Children’s Privacy

Namirasoft Password is not directed to children and is intended for use by individuals who are at least 18 years old. We do not knowingly collect Personal Information from children. Eligibility and age are managed by Namirasoft Account. If we learn that we have collected Personal Information from a child in a way that requires deletion, we will take appropriate steps to remove it.

17. Communications

We may send you messages that are necessary to operate the Service, such as security, technical, and account-related notices. These service messages are part of providing the Service. Any marketing communications are managed separately and subject to your choices, which you can control through Namirasoft Account.

18. Cookies, Tracking, and the Browser Extension

Within the Service, Namirasoft uses cookies and similar technologies that are necessary to sign you in, keep your session secure, and remember your preferences; authentication is handled through Namirasoft Account. On our public websites, we may also use analytics cookies, such as Google Analytics, to understand how visitors use the site, and advertising cookies from providers such as Google. Google Analytics, provided through Google Tag Manager, is used on both our public websites and within the Service, and advertising cookies are used on our public websites. The browser extension works on the pages you choose in order to offer to fill your saved logins on your device; it does not send Namirasoft your browsing history, and it unlocks your entries only with your master password on your device. You can manage cookies through your browser settings and any cookie controls we make available.

19. Accountability and Privacy Contact

Namirasoft is accountable for the Personal Information under its control, including information transferred to service providers for processing on our behalf. We have designated a Privacy Officer who is responsible for our compliance with this Policy and applicable privacy law and who oversees our handling of Personal Information.

Privacy Officer, Namira Software Corporation, British Columbia, Canada. You can reach our Privacy Officer by email at accounts@namirasoft.com or through the Contact Us section.

20. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint to our Privacy Officer using the contact details above. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

21. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, technology, or legal requirements. When material changes occur, we may notify users through email and/or announcements through the Service or its website, where appropriate or as required by applicable law. Your continued use of Namirasoft Password after updates are posted constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the Service.

Contact Us

For questions, comments, or concerns regarding this Privacy Policy or how the Service handles information, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.