Privacy Policy

version 1, June 17th 2024

Introduction

0kx.io is committed to protecting your privacy. This privacy policy explains how we collect, use, and disclose personal information that we may collect through our web service. By using our service, you consent to our use of your personal information as described in this policy.

Information we collect

We collect the following types of personal information:

  • For user data (if you create an account): your name, email; For the purpose to identify you.
  • For user data (if you DO NOT create an account): IP address; For the purpose to identify you.
  • For secure vault metadata: file names, date/time uploaded, date/time downloaded, encryption key hash; For the purpose of delivering file or messages.
  • For file or message information: encrypted content (no unencrypted or encryption keys transit via our service); For the purpose of delivering encrypted file or messages and provide an history on transfers.
  • For activity logs: IP addresses, activity date/time, user, file size, content type; For the purpose of securing the service and prevent abuse.

Information sharing and disclosure

We do not share any of your personal information, or any other information that you provide or we collect to any third party except for the following:

1. Amazon Web Services: We use AWS to host the storage for encrypted content (files and messages) and deliver emails to inform you about your transfer activities (if you have an user account). We use AWS S3 ans SES in the Canada-Central region.

Data security

We take all reasonable measures to protect the security of your personal information.

Data Retention

All the data we collect is deleted every hin accordance to the following retention policy:

  • User data is deleted 1 year after your last login or 90 days after you deactivate your account
  • Vault metadata is deleted between the latest of the retention set into your user account or 90 days (the default), but no sooner than 90 days
  • Files and messages are deleted after the retention set in your vault (24 hour by default), but no longer than 90 days.
  • Vault activity log are retained for 90 days

Changes to this privacy policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our website. You are advised to review this privacy policy periodically for any changes.

Contact us

We are located in Montreal, Canada, if you have any questions or concerns about this privacy policy or our privacy practices, please contact us at [email protected].