Privacy Policy

Data Collection

Our Whisprlock extension and service collect and process the following data:

• API keys for authentication with your Whisprlock account
• Encrypted secret data from your vault for display and management purposes
• Current website URL to provide context-aware secret suggestions
• Account information (email address) for user authentication
• Usage analytics to improve service functionality

Data Usage

• API keys are stored locally in your browser and used only to authenticate with our service
• Secret data is encrypted and stored securely on our servers
• Website URLs are used to filter and show relevant secrets for the current automation platform
• Account information is used for user authentication and service provision
• Usage data helps us improve the extension and service functionality

Data Storage and Security

• API keys are stored locally in your browser using Chrome's secure storage
• All secret data is encrypted using AES-256 encryption before storage
• All server communication uses HTTPS/TLS encryption
• We implement industry-standard security measures to protect your data
• Access to your data is restricted to authorized personnel only

Data Sharing

We do not sell, trade, or share your personal data with third parties, except:

• When required by law or legal process
• To protect our rights, property, or safety
• With service providers who assist in operating our service (under strict confidentiality agreements)

Browser Extension Specific

Our browser extension:

• Only activates on supported automation platforms (Zapier, Make, n8n)
• Does not track your browsing activity on other websites
• Stores minimal data locally (only your API key for authentication)
• Communicates only with our secure API servers
• Does not inject or modify content on web pages

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Withdraw consent for data processing

Data Retention

We retain your data only as long as necessary to provide our services. When you delete your account, all associated data is permanently removed from our systems within 30 days.

Contact Us

For questions about this privacy policy or to exercise your data rights, contact us at: Support