Privacy Policy

1. Definitions

• Personal Information: information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual.
• Service: Namirasoft Password, including its web console and browser extension.
• Namirasoft Services (the ecosystem): the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you across Namirasoft Services.
• Master password: the password you choose to unlock your vault, which only you know and which is never sent to or stored by Namirasoft.
• Entry: an item you save, such as a login, made up of the fields you add to it.
• Sensitive value: a field within an entry that you mark or that the Service treats as secret, such as a password, which is stored only in encrypted form.
• Vault: your collection of entries, protected by your master password.
• Workspace: the Namirasoft Workspace an entry belongs to, used to organize and separate your entries.

2. Namirasoft Account

Namirasoft Password relies on Namirasoft Account for authentication. When you sign in, Namirasoft Account provides the Service with the identifiers it needs to associate your vault with you and show you your own records. The collection and handling of your registration details, sign-in credentials, and profile are governed by the Namirasoft Account Privacy Policy. Your Namirasoft Account sign-in is separate from your master password. Signing in with your Namirasoft Account opens Namirasoft Password, but your entries stay encrypted and can be unlocked only with your master password. Namirasoft Account also issues any Service User you use, a non-human identity such as an application or AI agent for automated access, which is created and handled under that same policy. Namirasoft Account establishes these identities, while the access that lets another user or a Service User act in Namirasoft Password is granted and managed through Namirasoft Access and handled under the Namirasoft Access Privacy Policy.

3. Information We Collect

Namirasoft Password is built to hold your vault in encrypted form and only the additional information it needs to operate. We collect:

• Account identifiers received from Namirasoft Account, used to associate your vault with you and show you your own records.
• Your entries, including the fields you add and the sensitive values you store in them, such as passwords. The sensitive values are encrypted with a key derived from your master password before they are stored, so Namirasoft holds them only as encrypted data.
• Organizational details you use to manage and find your entries, such as the name you give an entry, the website or application it is for, any description, and any templates, categories, tags, or field values you add, together with the Workspace an entry belongs to. Unlike the sensitive values, these organizational details, including the website or application an entry is for, are stored in readable form so the Service can find, match, and organize your entries; they are not encrypted, while the sensitive values remain encrypted and unreadable to Namirasoft.
• Your encrypted account key, the encrypted data the Service stores so that your vault can be unlocked with your master password on your device. This is stored only in encrypted form.
• Your recovery setup, including the recovery questions you choose when you create your master password and additional encrypted copies of your account key that let you regain access if you forget your master password. Your answers to the recovery questions are used only on your device and are not sent to or stored by Namirasoft.
• Information from the browser extension, which the extension gathers on your device while you browse. When a page has a sign-in, sign-up, or password field, the extension reads the form fields on that page to recognize it, and it sends Namirasoft the address of the site you are on so it can find the saved logins that match, offer them to fill, or offer to generate a new password. The extension does not send Namirasoft your browsing history or the content of the pages you visit.

4. Information We Do Not Collect

Namirasoft Password does not:

• collect or store your master password, which is never saved or transmitted to Namirasoft, or the key derived from it;
• have the ability to decrypt, read, or recover the sensitive values you store, such as your passwords, because they are encrypted with a key only you hold through your master password or your recovery answers;
• collect or store your answers to your recovery questions, which are used only on your device to unlock a backup copy of your account key;
• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• collect, track, or store your browsing history, the sites you visit, or your activity across the web, because the browser extension acts only on the page where you are using it, where it recognizes a sign-in or sign-up field and offers your saved login or a suggestion to generate a new password; and
• use your entries to build an advertising profile, and it does not sell your information.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. When you first use Namirasoft Password, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for security, fraud prevention, technical operation, or legal compliance, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: store and synchronize your encrypted vault across your devices; let you create, organize, generate, and fill your entries; match a saved login to the website or application you are visiting so the browser extension can offer to fill it on your device; apply your Workspace and settings; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We cannot and do not read the sensitive values you store, and we do not use your entries for advertising.

8. Automated Decision-Making

Namirasoft Password stores and synchronizes your encrypted vault and helps you fill your entries where you choose. It does not make decisions that produce legal or similarly significant effects about you through automated processing, and it does not profile you or take automated actions on your behalf beyond the password-management features you use.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information, and it never shares the sensitive values you store in readable form. We share information only as follows:

• Within Namirasoft Services. Your account identifiers and the organizational details of your entries, such as their names, the websites they are for, categories, templates, and the Workspace they belong to, are shared with the Namirasoft Services this Service operates with, such as Namirasoft Account for identity and Namirasoft Workspace for grouping, so it works as part of the ecosystem; your sensitive values are handled only as encrypted data.
• Service providers that host and secure our infrastructure, which therefore hold what we store for you, meaning your readable organizational details and your encrypted sensitive values, under confidentiality and only to provide their services to us.
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service; in that case we can provide only what we actually hold, which is your account and organizational details in readable form and your sensitive values only as encrypted data we cannot decrypt.
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy.
• At your direction, when you choose to export or share your own entries, which you unlock on your device.

Because the sensitive values you store are encrypted with a key only you hold, Namirasoft cannot disclose them in a readable form, including in response to a legal request; we can only provide the encrypted data we hold.

10. International Transfers

Namirasoft operates from Canada and may process and store information in Canada and in other countries where we or our service providers operate. Where information is transferred across borders, we take steps to protect it with appropriate safeguards and in accordance with applicable law. By using the Service, you understand that your information may be processed in countries other than the one in which you reside, which may have different data protection rules, and we apply appropriate safeguards to protect your information where required. Your sensitive values remain encrypted wherever they are stored.

11. Security Commitment

Security is central to Namirasoft Password. The sensitive values you store are encrypted with a key derived from your master password, and your master password is never saved or transmitted to Namirasoft, so only you can unlock your vault. The Service is built on zero-knowledge and zero-trust principles across the web console and the browser extension, and its source code is published to support transparency. We also apply measures such as access controls, authentication protections, encryption in transit, network protections, monitoring, and logging, and we restrict access to information to those who need it to operate and support the Service. If you forget your master password, the only way to regain access is through the recovery questions you set up when you created it; because Namirasoft never holds your master password, it cannot reset it for you, and if you cannot answer your recovery questions, your vault cannot be recovered. Recovery happens on your device. Your answers unlock a backup copy of your account key that only you can produce, and Namirasoft stores your recovery questions and encrypted backup copies but never your answers, so recovery does not give Namirasoft the ability to read your entries. Your master password and recovery details are the only keys that unlock your encrypted vault, so keeping them safe is essential.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law. Even in the event of an incident, the sensitive values you store remain encrypted and can only be unlocked with your master password or your recovery answers, which we never hold.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Password keeps your encrypted vault and its details for as long as your Namirasoft Account exists, or as needed to provide the Service, so that your entries remain available to you. You can delete an entry, or your whole vault, at any time. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete an entry, or when your vault is removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide what to store in your vault, and you are responsible for your entries and for keeping your master password safe. Namirasoft Password stores and synchronizes your encrypted vault as you direct. Because the sensitive values you store are encrypted with a key only you hold, you are the only person who can read them, and their accuracy and content are under your control.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view, manage, and export your entries in the Service at any time using your master password. For other requests, contact us and we will handle them in accordance with applicable law, which may include retaining a record where we have a legitimate or legal basis to do so. Note that Namirasoft cannot provide the sensitive values you store in a readable form, because only you can decrypt them. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

Namirasoft Password is not directed to children and is intended for use by individuals who are at least 18 years old. We do not knowingly collect Personal Information from children. Eligibility and age are managed by Namirasoft Account. If we learn that we have collected Personal Information from a child in a way that requires deletion, we will take appropriate steps to remove it.

16. Communications

We may send you messages that are necessary to operate the Service, such as security, technical, and account-related notices, which we send to the verified email address on your Namirasoft Account. These service messages are part of providing the Service.

17. Cookies, Tracking, and the Browser Extension

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

The browser extension is part of the Service and is covered by this Privacy Policy. It runs on the web pages you visit so it can help you sign in and sign up. To recognize where it can help, it reads the form fields on the page you are on and identifies sign-in, sign-up, and password fields from their structure and common patterns, which it does on your device. When it finds such a field it appears automatically, and it can fill a login you have already saved for that site, generate a new strong password from a template when you are creating an account, and save a new login you enter, all without displaying your sensitive values in the open.

To find the logins that match, the extension looks at the address of the page you are on and asks Namirasoft for the entries whose website matches, so Namirasoft receives the address of the site you are using it on. It reads only the form fields and the address of the page you are actively using it on. It does not collect your general browsing history, does not track your activity across other tabs or sites, and sends Namirasoft only your vault data, with the sensitive values encrypted, never the content of the pages you visit. It uses only access to the pages you visit and local storage, which holds your unlocked key on your device for the time you choose, and it unlocks your entries only with your master password on your device.

The web browser you use, such as Chrome or Edge, is a separate product provided by another company and is governed by that company’s own privacy policy, not by this one. This Privacy Policy covers the Namirasoft Password extension and how it behaves, not the browser itself or how the browser handles your activity.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, or concerns regarding this Privacy Policy or how the Service handles information, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.