Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Secret.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Secret: a sensitive value you store, protected by the algorithm you choose, together with a name and group you give it to find it.
• Algorithm: the method used to protect a Secret, which is either a one-way hash or a reversible encryption, as you select.
• Reference: the identifier of a Secret, which other Namirasoft products store in place of the value itself so they can use the Secret without holding it.
• Workspace: a grouping of products and data, created and managed in Namirasoft Workspace, used to organize your Secrets.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, protecting, verifying, or organizing it.

2. Namirasoft Account

Access to Namirasoft Secret requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. For this Service, this Privacy Policy controls; for identity and authentication, the Namirasoft Account Privacy Policy controls.

3. Information We Collect

To provide the Service, Namirasoft Secret processes:

• Account identifiers received from Namirasoft Account, used to associate your Secrets with you and show you your own Secrets.
• The value you store, which you provide when you create or update a Secret and which is protected immediately using the Algorithm you choose, then kept only in that protected form. The Service does not keep your value as ordinary readable text.
• The protection method you select for each Secret, so the Service knows how to protect and use it.
• Labels you add to find and organize a Secret, such as its name, its group, and any categories, tags, or field values, together with the Workspace it belongs to.

How your Secrets are protected. When you store a Secret, you choose how it is protected. If you choose a one-way hash, such as SHA-256 or bcrypt, the value is transformed into a form that cannot be turned back into the original; the Service can later confirm whether a value you present matches, but it cannot reveal the stored value, because the original is not kept. If you choose encryption, such as AES-256, the value is encrypted at rest and can be decrypted by the Service to return it to you, or to an application you authorize to use it, when it is requested. In both cases the value is protected before it is stored, and only the protected form is kept.

The labels are not the secret. The name and group you give a Secret are stored as ordinary text so you can find it. Please keep the sensitive value in the Secret itself and do not place it in the name, group, or other labels.

4. Information We Do Not Collect

Because of how the Service is built, Namirasoft Secret does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• keep the values you store as ordinary readable text; each value is protected before it is stored;
• reveal a value protected by a one-way hash, which cannot be turned back into the original;
• make an encrypted value available to anyone other than you and the applications you authorize to use it;
• use your Secrets for advertising, or sell them.

5. Consent and Legal Grounds

Namirasoft generally collects, uses, and discloses your Personal Information with your knowledge and consent, which may be express or implied depending on the sensitivity of the information and the circumstances. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to provide a service you have requested, for certain security, fraud-prevention, legal, or business purposes, or where otherwise permitted or required by law. Where our activities are also subject to laws that use a legal-basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above solely to: store the values you provide in protected form; confirm whether a value you present matches a Secret protected by a one-way hash; return an encrypted Secret to you or to the applications you authorize when it is requested; let you find and organize your Secrets; maintain the security and integrity of the Service; and diagnose problems and improve its reliability. We do not use your Secrets for advertising.

8. Automated Decision-Making

Namirasoft Secret does not make decisions that produce legal or similarly significant effects about you through automated processing. It protects, stores, verifies, and returns the values you place in it, as you and the applications you authorize direct; it does not profile you or take automated actions on your behalf.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• With the applications you authorize, when they request a Secret you have allowed them to use, so they can carry out the task you set up;
• Within Namirasoft Services where needed to operate the Service and apply your Workspace and settings;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

A current list of the material service providers we use may be made available on request.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Data Security

Protecting the values you store is the central purpose of the Service. Each value is protected before it is stored, using a one-way hash or encryption as you choose, and only the protected form is kept. We use security practices aligned with recognized industry standards to protect information within the Service, which may include access controls, authentication protections, encryption in transit and at rest, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. You also help keep your Secrets safe by keeping your Namirasoft Account credentials and tokens confidential, authorizing only the applications you intend, and reviewing the access you have granted.

12. Data Security Incidents and Breach Notification

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

13. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Secret keeps each Secret, in its protected form, for as long as your Namirasoft Account exists, or until you delete it. You can create, update, and delete your Secrets at any time through the Service. Deleting a Secret removes it; an application that referenced it will no longer be able to use it. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a Secret, or when your records are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

14. Data Integrity and Responsibility

You decide what values you store, how each is protected, and which applications you authorize to use them, and you are responsible for those choices. Namirasoft Secret protects, stores, and returns your values as you and your authorized applications direct. You are responsible for keeping your own copy of any value you may need independently of the Service, and for revoking access when an application should no longer use a Secret.

15. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view your Secrets’ names and settings, retrieve the value of a Secret you protected with encryption, update a Secret, and delete a Secret in the Service at any time. A value protected by a one-way hash cannot be retrieved, by design. For other requests, contact us and we will handle them in accordance with applicable law. For identity and account rights, use Namirasoft Account.

To make a request, you can contact us through support.namirasoft.com or by email at accounts@namirasoft.com, and to protect your information we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

16. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

17. Communications

Namirasoft Secret does not send communications; it stores and protects the values you place in it. Any account-related messages you receive are sent by applicable Namirasoft Services, such as Namirasoft Account or Namirasoft Notification Sender, under their own terms and your Namirasoft Account notification settings.

18. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as your authentication session managed through Namirasoft Account, together with analytics cookies from Google Analytics that help us understand how it is used. The Namirasoft public websites may additionally use advertising cookies from Google. Google Analytics and Google advertising are operated by Google under its own privacy terms. You can manage cookies through your browser settings and any cookie controls we make available.

19. Accountability and Privacy Contact

Namirasoft is accountable for the Personal Information under its control, including information transferred to service providers for processing on our behalf. We have designated a Privacy Officer who is responsible for our compliance with this Policy and applicable privacy law and who oversees our handling of Personal Information.

Privacy Officer, Namira Software Corporation, British Columbia, Canada. You can reach our Privacy Officer by email at accounts@namirasoft.com or through the Contact Us section.

20. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint to our Privacy Officer using the contact details above. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

21. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy at any time to reflect changes in the Service, legal requirements, or security practices. When material changes occur, Namirasoft may notify users through email and/or announcements through the Service or its website, where appropriate or as required by applicable law. Your continued use of Namirasoft Secret after updates are posted constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must stop using the Service.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Secret, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.