Privacy Policy

Who we are

PrivyDeckoperates the PrivyDeck personal privacy dashboard ("PrivyDeck," "we," "us"). This policy explains how we handle personal data when you use our website and hosted service.

Privacy contact: privacy@privydeck.com

What PrivyDeck does

PrivyDeck helps you block trackers, monitor your privacy posture, store encrypted documents, and send data-subject requests to third-party companies. We are designed to collect as little as possible.

Categories of personal data we process

• Account data: email address, display name, profile image (from your sign-in provider), account creation date, subscription tier
• Billing data: Stripe customer ID and subscription status (payment card details are handled entirely by Stripe)
• Device data: names, types, platform, protection status, agent version, last-seen timestamps
• Network telemetry: aggregated Pi-hole blocker statistics and VPN connection status when you connect a home agent
• Tracker alerts: blocked domain names, hit counts, categories, and optional AI-generated suggestions
• Vault metadata: titles, categories, file sizes, encryption salts/IVs — not plaintext contents
• Vault ciphertext: encrypted files you upload (decrypted only in your browser with your passphrase)
• Privacy score history: numeric scores and component breakdowns
• DSAR letters: company names, contact emails, template choices, and generated letter text you create
• Preferences: blocklist toggles, lockdown mode, extension sync metadata, in-app notifications
• Technical data: CSRF token cookie, session authentication cookie, IP address in server logs (hosting provider)

What we do not collect

• Your vault passphrase — never transmitted to our servers
• Plaintext vault document contents — encrypted client-side before upload
• Your full browsing history — only aggregated tracker statistics when protection is active
• Advertising profiles or cross-site tracking — we do not run third-party analytics or ad pixels

Purposes and legal bases (GDPR / UK GDPR)

Where GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract (Art. 6(1)(b)): providing your account, sync, vault storage, and subscription features
• Legitimate interests (Art. 6(1)(f)): security (CSRF, rate limits), fraud prevention, service improvement, and optional AI tracker coaching when enabled
• Consent (Art. 6(1)(a)): optional AI suggestions — you can disable these in Settings → Privacy preferences
• Legal obligation (Art. 6(1)(c)): tax, accounting, and lawful requests from authorities

California (CCPA / CPRA) notice at collection

Categories collected: identifiers (email, name), internet/network activity (tracker domain statistics), commercial information (subscription status), and optionally sensitive personal information if you store medical, financial, or legal documents in your encrypted vault.

Sources: you directly and your connected devices. Business purposes: provide the service, security, billing, and customer support. Retention: see Retention section below.

We do not sell or share personal information for cross-context behavioral advertising. Do Not Sell or Share My Personal Information. We honor Global Privacy Control (GPC). Consumer rights (access, delete, correct, portability, limit sensitive PI): Your Privacy Rights.

Non-discrimination: we will not discriminate against you for exercising CCPA/CPRA rights. See non-discrimination notice.

United States state privacy laws

If you reside in Virginia (VCDPA), Colorado (CPA), or Connecticut (CTDPA), you have rights to access, delete, correct, and opt out of the sale of personal data and targeted advertising. We do not sell personal data or use it for targeted advertising.

Exercise rights via Your Privacy Rights or Do Not Sell or Share. We apply the same non-discrimination standard to all US state privacy requests.

Other regional frameworks

Regardless of where you live, we apply the same core rights. Details and how to exercise them: Your Privacy Rights.

• Brazil (LGPD): lawful bases above; contact our privacy team; lodge complaints with the ANPD
• Canada (PIPEDA): privacy contact acts as privacy officer; access, challenge accuracy, withdraw consent; complaints to OPC if unresolved
• South Africa (POPIA): lawful processing; contact us to exercise rights
• Japan (APPI): purposes specified here; disclosure, correction, suspension, deletion on request; cross-border safeguards with subprocessors
• South Korea (PIPA): access, correction, deletion, suspend processing; withdraw consent for optional AI features
• Singapore / Thailand PDPA: limited collection for stated purposes; access and correction on request
• Australia (Privacy Act / APPs): open handling; access and correction; complaints to OAIC after contacting us
• European Union / UK (GDPR) & Switzerland (FADP): legal bases, retention, subprocessors, and complaint rights as described above
• European Union (ePrivacy): strictly necessary cookies only; see Cookie Policy; no advertising trackers on PrivyDeck

Third-party payment processing (Stripe)

When you subscribe or manage billing, Stripe loads on checkout and the billing portal. PrivBeacon and similar audits may detect Stripe as a "payment tracker" — this is expected: Stripe processes payments and may set cookies for fraud prevention and checkout functionality. We do not use Stripe for advertising. Stripe's privacy policy governs their processing: stripe.com/privacy. See also our Cookie Policy.

Subprocessors and recipients

We share data only with service providers who help us run PrivyDeck:

• Stripe — payment processing (billing data)
• Sign-in providers you choose — Google, GitHub, Apple, or email magic links (authentication)
• Optional AI provider (e.g. OpenAI) — blocked domain name and hit count only, when AI coaching is enabled and you have not opted out
• Hosting infrastructure — server logs and stored database (e.g. Fly.io or your self-hosted server)

We do not sell personal data to data brokers. DSAR letters you generate are sent by you to third parties — not by us.

International transfers

If you access PrivyDeck from outside the country where our servers run, your data may be transferred internationally. Where required, we rely on Standard Contractual Clauses or equivalent safeguards with subprocessors. Self-hosted deployments keep data on your own infrastructure.

Retention

• Account data: until you delete your account, plus up to 30 days for backup purge
• Score history and alerts: until deleted or account erasure
• Vault ciphertext: until you delete items or your account
• Server logs: typically 30–90 days (hosting provider dependent)
• Stripe records: as required for tax and accounting (typically 7 years)

Cookies and similar technologies

We use strictly necessary cookies only (session, CSRF). We do not use advertising or analytics cookies. Details: Cookie Policy.

Automated processing and AI

When enabled, we may send blocked domain names and hit counts to an AI API to generate short tracker-blocking suggestions. This is not used for profiling or automated decisions with legal effect. Disable AI coaching anytime in Settings → Privacy preferences.

Your privacy rights

Full instructions for access, deletion, correction, portability, opt-out, and regional rights: Your Privacy Rights. Summary for signed-in users:

• Access & portability: Settings → Privacy data export (JSON bundle including vault ciphertext)
• Erasure: Settings → Delete account (permanent; type DELETE to confirm)
• Rectification: update your profile via your sign-in provider, or contact us
• Restrict / object: disable AI coaching; cancel subscription; contact us for other requests
• Withdraw consent: disable optional AI features; delete account to stop all processing
• Opt out of sale/sharing: we do not sell — see Do Not Sell page; GPC honored

Email privacy@privydeck.com for requests you cannot complete in Settings. We respond within 30 days (GDPR) or 45 days (CCPA, extendable once). We may verify your identity before fulfilling sensitive requests.

Children

PrivyDeck is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact privacy@privydeck.com and we will delete it.

Security

Vault files are encrypted in your browser before upload. Agent and extension tokens are stored as hashes. We use CSRF protection, content security policy, and rate-limited exports. No system is perfectly secure — use a strong vault passphrase and keep devices updated.

Data breaches

If a breach likely affects your rights, we will notify you and relevant authorities as required by applicable law (e.g. GDPR Art. 33–34, state breach laws).

Changes to this policy

We may update this policy. Material changes will be reflected in the "Last updated" date. Continued use after changes constitutes acceptance where permitted by law.

Contact

Privacy: privacy@privydeck.com
General support: support@privydeck.com
Help center: /help