# Privacy Policy

**Last Updated:** August 10, 2026  
**Effective Date:** August 10, 2026  
**Version:** 2.1

## 1. Scope

This Policy explains how Encypher handles personal data when you use its websites, platform, APIs, plugins, extensions, and support channels. A separate approved agreement may add terms for an organization.

## 2. Data we collect

We collect account and organization details, contact information, authentication and security events, billing records, service configuration, support requests, and technical usage records. Public issue reports may include a reply address and diagnostics supplied by the reporter. Do not submit secrets or unnecessary personal data in diagnostics.

## 3. How we use data

We use data to provide and secure the Service, authenticate users, process transactions, answer support requests, prevent abuse, maintain operational records, comply with law, and improve product reliability. We do not treat customer content as ours.

## 4. Sharing

We share data with service providers only as needed to operate the Service, with an organization that administers your account, when you direct us, or when law requires it. The public Subprocessors page lists only arrangements Encypher has approved for publication. It does not promise a processing location or notice period unless recorded there as confirmed.

## 5. Retention

Retention depends on the record type, account state, legal duties, security needs, and an organization's approved settings. Public verification and revocation facts may outlive an account where needed to preserve trust decisions. Backup deletion and customer-controlled systems may follow separate operational obligations.

## 6. Security

Encypher uses access controls, encryption, logging, and other safeguards appropriate to the systems it operates. No security measure eliminates all risk.

## 7. Choices and rights

Depending on location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data. Send requests to privacy@encypher.com. Encypher may verify identity and preserve data that law or security duties require it to keep.

## 8. International processing

Service providers may process data in locations where they operate. Encypher does not claim EU-only or region-locked processing unless an approved written agreement and current deployment record say so.

## 9. Children

The Service is not directed to children under 13, and Encypher does not knowingly collect their personal data through account registration.

## 10. Changes and contact

Material changes will be posted with a new version and effective date. Contact privacy@encypher.com for privacy questions.