Privacy Policy

1. Definitions

• Namirasoft: Namira Software Corporation.
• Service: Namirasoft Secret.
• Namirasoft Services: the broader family of Namirasoft products that operate with your Namirasoft Account.
• Account: your Namirasoft Account, which authenticates you and governs identity across Namirasoft Services.
• Secret: a sensitive value you store, protected by the algorithm you choose, together with a name and group you give it to find it.
• Algorithm: the method used to protect a Secret, which is either a one-way hash or a reversible encryption, as you select.
• Reference: the identifier of a Secret, which other Namirasoft products store in place of the value itself so they can use the Secret without holding it.
• Workspace: a grouping of products and data, created and managed in Namirasoft Workspace, used to organize your Secrets.
• Personal Information: information that identifies, relates to, or can reasonably be linked to an identifiable individual, including you.
• Processing: any operation performed on information, such as storing, protecting, verifying, or organizing it.

2. Namirasoft Account

Access to Namirasoft Secret requires a Namirasoft Account. You register and sign in through Namirasoft Account, which authenticates your identity. Your identity, login, device and network details, and any other personal information associated with your Namirasoft Account are collected and handled by Namirasoft Account under the Namirasoft Account Privacy Policy, not by this Service. Namirasoft Account also issues any Service User you use, a non-human identity such as an application or AI agent for automated access, which is created and handled under that same policy. Namirasoft Account establishes these identities, while the access that lets another user or a Service User act in Namirasoft Secret is granted and managed through Namirasoft Access and handled under the Namirasoft Access Privacy Policy.

3. Information We Collect

To provide the Service, Namirasoft Secret processes:

• Account identifiers received from Namirasoft Account, used to associate your Secrets with you and show you your own Secrets.
• The value stored in a Secret, provided when you or an application you authorize creates or updates it, through the console or the API, and protected immediately using the Algorithm you choose, then kept only in that protected form. The Service does not keep your value as ordinary readable text.
• The protection method you select for each Secret, so the Service knows how to protect and use it.
• Labels you add to find and organize a Secret, such as its name, its group, and any categories, tags, or field values, together with the Workspace it belongs to.

How your Secrets are protected. When you store a Secret, you choose how it is protected. If you choose a one-way hash, such as SHA-256 or bcrypt, the value is transformed into a form that cannot be turned back into the original; the Service can later confirm whether a value you present matches, but it cannot reveal the stored value, because the original is not kept. If you choose encryption, such as AES-256, the value is encrypted at rest and can be decrypted by the Service to return it to you, or to an application you authorize to use it, when it is requested. In both cases the value is protected before it is stored, and only the protected form is kept.

The labels are not the secret. The name and group you give a Secret are stored as ordinary text so you can find it. Please keep the sensitive value in the Secret itself and do not place it in the name, group, or other labels.

4. Information We Do Not Collect

Namirasoft Secret does not:

• collect your Namirasoft Account password or sign-in credentials, which are handled by Namirasoft Account;
• keep the values you store as ordinary readable text; each value is protected before it is stored;
• reveal a value protected by a one-way hash, which cannot be turned back into the original;
• make an encrypted value available to anyone other than you, the users you authorize through Namirasoft Access, and the applications you authorize to use it;
• use your Secrets for advertising, or sell them.

5. Consent and Legal Grounds

Namirasoft Secret stores and protects the values you place in it because you use the Service through your Namirasoft Account. When you first use Namirasoft Secret, you agree to this Privacy Policy and the Terms of Service, which is how you give your consent to the handling of your Personal Information described here; depending on the information and the circumstances, consent may be express or implied, and you can withdraw it as described in section 6. In some cases, applicable law allows or requires us to handle Personal Information without consent, for example to store, protect, and return the secrets you have asked us to keep, to protect the security and integrity of the Service, or to comply with a legal obligation. Where our activities are also subject to laws that use a legal basis framework, such as for users outside Canada, we rely on the appropriate basis for the activity, including performance of a contract, our legitimate interests, consent, and compliance with legal obligations.

6. Consent and Withdrawal

Where we rely on your consent to process Personal Information, you may withdraw it at any time. Withdrawing consent does not affect processing already carried out, and it may limit your ability to use parts of the Service that depend on that information. You can view, update, and delete your Secrets in the Service, and manage your identity and related consents through Namirasoft Account.

7. How We Use Information

We use the information above to: store the values you provide in protected form; confirm whether a value you present matches a Secret protected by a one-way hash; return an encrypted Secret to you or to the applications you authorize when it is requested; let you find and organize your Secrets; maintain the security and integrity of the Service; and diagnose and fix problems so the Service runs reliably. We use your Secrets only to provide these functions to you; we do not use their contents for our own purposes, use them for advertising, or sell them.

8. Automated Decision-Making

Namirasoft Secret does not make decisions that produce legal or similarly significant effects about you through automated processing. It protects, stores, verifies, and returns the values you place in it, as you and the applications you authorize direct; it does not profile you or take automated actions on your behalf.

9. Sharing and Disclosure

Namirasoft does not sell Personal Information. We share information only as follows:

• With the applications you authorize, when they request a Secret you have allowed them to use, so they can carry out the task you set up;
• Within Namirasoft Services where needed to operate the Service and apply your Workspace and settings;
• Service providers that host or secure our infrastructure, bound by confidentiality and permitted to use the information only to provide their services to us;
• Legal and safety where required by law or to protect rights, safety, and the integrity of the Service;
• Business transfers such as a merger, acquisition, or sale of assets, subject to this Policy;
• At your direction or with your consent when you ask us to share information or otherwise agree;
• Aggregated or de-identified information that cannot reasonably identify you.

10. International Transfers

Namirasoft is based in Canada, and your information may be processed in Canada and in other countries where we or our service providers operate. We handle information in accordance with applicable Canadian privacy laws, including PIPEDA and applicable provincial privacy legislation, and we take steps intended to ensure your information remains protected when it is processed in another country. Where required by applicable law, we use appropriate safeguards for such transfers. Because privacy laws differ between countries, information processed in another country may be subject to that country’s laws.

11. Security Commitment

Protecting the values you store is the central purpose of the Service. Each value is protected before it is stored, using a one-way hash or encryption as you choose, and only the protected form is kept. Namirasoft maintains administrative, technical, and organizational measures to protect Personal Information within the Service against unauthorized access, disclosure, alteration, misuse, loss, or destruction, which may include access controls, authentication protections, encryption in transit and at rest, monitoring, logging, and operational safeguards appropriate to the nature of the information processed, and we continually review and strengthen them. You also help keep your Secrets safe by keeping your Namirasoft Account credentials and tokens confidential, authorizing only the applications you intend, and reviewing the access you have granted.

We maintain procedures to identify, assess, and respond to security incidents involving Personal Information. Where a security incident affecting Personal Information creates a real risk of significant harm, or where notification is otherwise required by applicable law, we will notify affected individuals and the relevant regulators, and keep records of the incident, in accordance with applicable law.

12. Data Retention

We retain your information only for as long as it is necessary for the purposes described in this Policy, including to provide and support the Service and to meet our legal, security, and operational requirements. Namirasoft Secret keeps each Secret, in its protected form, for as long as your Namirasoft Account exists, or until you delete it. You can create, update, and delete your Secrets at any time through the Service. Deleting a Secret removes it; an application that referenced it will no longer be able to use it. The retention and deletion of your account data overall are governed by Namirasoft Account under the Namirasoft Account Privacy Policy. When you delete a Secret, or when your records are removed because your Namirasoft Account is deleted, the information is removed from active use and then permanently erased by our automated systems; because of system dependencies and backups, complete erasure can take from moments to several months, and copies may remain in secure backups until they are replaced in the ordinary course.

13. Data Integrity and Responsibility

You decide what values you store, how each is protected, and which applications you authorize to use them, and you are responsible for those choices. Namirasoft Secret protects, stores, and returns your values as you and your authorized applications direct. You are responsible for keeping your own copy of any value you may need independently of the Service, and for revoking access when an application should no longer use a Secret.

14. Your Privacy Rights

Under applicable law you may have rights over your Personal Information, such as to access it, correct it, request its deletion, object to or restrict certain processing, withdraw consent, or receive a copy in a portable form. You can view your Secrets’ names and settings, retrieve the value of a Secret you protected with encryption, update a Secret, and delete a Secret in the Service at any time. A value protected by a one-way hash cannot be retrieved, by design. For other requests, contact us and we will handle them in accordance with applicable law. For identity and account rights, use Namirasoft Account.

To make a request, contact us using the options in the Contact Us section at the bottom of this page. To protect your information, we may need to verify your identity before we respond, within the timeframes and subject to the exceptions set out in applicable law.

15. Children’s Privacy

The Service is not directed to individuals under 18. Eligibility and accounts are managed by Namirasoft Account; if Namirasoft Account determines that an account belongs to a person under 18, the account and its information are handled under the Namirasoft Account Privacy Policy.

16. Communications

Namirasoft Secret does not send communications; it stores and protects the values you place in it. When we need to contact you about your account or the services you use, for example a security, technical, or account-related notice, we send the message to the verified email address on your Namirasoft Account, the address you signed up with and verified there. These messages are part of providing the Service.

17. Cookies and Tracking

The Service uses cookies that are strictly necessary to sign you in and operate it, such as the cookies used to maintain your authenticated session, together with Google Analytics cookies that help us understand how it is used. Google Analytics is operated by Google under its own privacy terms. You can manage cookies through your browser settings.

18. Accountability and Privacy Contact

Namirasoft is responsible for the Personal Information under its control and takes steps to ensure that such information is handled in accordance with this Privacy Policy and applicable privacy laws. Namirasoft has designated a person accountable for its compliance with this Privacy Policy, and their identity is available on request.

Questions, requests, or concerns regarding Namirasoft’s privacy practices or the handling of Personal Information may be submitted using the contact options in the Contact Us section at the bottom of this page.

19. How to Make a Complaint

If you have a concern about how we handle your Personal Information, you may submit a complaint using the contact options in the Contact Us section at the bottom of this page. We will review and respond to your complaint in accordance with our privacy procedures and applicable law. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province, as applicable.

20. Changes to This Privacy Policy

Namirasoft may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we make changes, we revise the effective date and post the updated Policy here. For minor or clarifying updates, your continued use of the Service after the updated Policy is posted indicates your acceptance of it. Where a change materially affects how we collect, use, or disclose your Personal Information, we will show you what has changed and ask you to review and agree to the updated Privacy Policy and Terms of Service before you continue using the Service. If you do not agree with an updated Policy, you may stop using the Service and request deletion of your Account.

Contact Us

For questions, comments, requests, or concerns regarding this Privacy Policy or information practices relating to Namirasoft Secret, please contact Namirasoft using one of the methods below. Where possible, we recommend submitting requests through Namirasoft Support for faster processing and response tracking.

Support: support.namirasoft.com

Email: accounts@namirasoft.com

Namirasoft reviews and responds to requests in accordance with applicable laws, internal procedures, and technical, security, legal, and business requirements associated with operation of the Service.