Privacy Policy for SecureVault
Effective Date: March 13, 2026

1. Introduction
   SecureVault ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how the SecureVault Firefox Extension collects, uses, and protects your information. SecureVault is designed with a single, dedicated purpose: to act as a secure password manager that allows users to safely generate, store, and auto-fill credentials across websites.
2. Information We Collect
   To provide our core password management features, SecureVault processes the following types of data:

Personally Identifiable Information: We collect your email address solely for account creation, authentication, and communication regarding your SecureVault account.

Authentication Information: The extension processes passwords, secure notes, and TOTP (authenticator) keys that you choose to save in your vault.

Website Content & URLs: The extension reads website URLs and login form fields on the active tab to accurately auto-fill your saved credentials.

1. Data Security & End-to-End Encryption
   Your security is our highest priority. SecureVault utilizes a zero-knowledge, end-to-end encryption model.

Local Encryption: All authentication information (passwords, notes, keys) is encrypted locally on your device using your Master Password before it is ever transmitted to our private servers (securevault.live).

Zero-Knowledge: We do not know, and cannot access or retrieve, your Master Password or the unencrypted contents of your vault.

1. Web Store Required Disclosures
   To comply with the Firefox Web Store Developer Program Policies, we explicitly certify the following regarding your user data:

We do not sell or transfer your data: We will never sell or transfer user data to third parties, outside of the approved use cases required to provide the core service.

We do strictly adhere to our single purpose: We do not use or transfer user data for any purposes that are unrelated to the extension's primary function as a secure password manager.

We do not use your data for credit decisions: We do not use or transfer user data to determine creditworthiness or for any lending purposes.

1. Data Retention and Deletion
   Your encrypted vault data is retained on our servers only for as long as you maintain an active SecureVault account. You have the right to permanently delete your account and all associated encrypted vault data at any time through the extension settings or by contacting us.
2. Changes to This Policy
   We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. The updated policy will be posted with a revised "Effective Date."
3. Contact Us
   If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:
   Email: info@shieldxsecurity.com