Privacy Policy

Sablefort, Inc. ("Sablefort", "we", "us") provides Sablefort Keyvault, a secrets management product for teams. This Privacy Policy applies to our websites and applications (the "Services"). By using the Services you agree to the practices described here.

Information we collect

• Account information. When your organization sets up Sablefort, we collect details such as your name, work email, organization, and role.
• Encrypted vault data. Your vaults are encrypted on your device before they reach us. We store this data only in encrypted form and cannot read its contents.
• Usage and device information. We collect information about how the Services are used, such as app version, operating system, and diagnostic and performance data, to keep the product reliable.
• Support communications. If you contact us, we keep the messages and details you provide so we can help.

How we use information

• To provide, maintain, and improve the Services.
• To sync your encrypted vaults across your devices.
• To authenticate users and administer organization access.
• To communicate with you about updates, security, and support.
• To detect, prevent, and address technical issues and abuse.

We do not sell your personal information, and we do not use the contents of your vaults for advertising.

How we share information

We share information only as needed to run the Services: with service providers who process data on our behalf under contract, with your organization's administrators who manage your account, and where required by law or to protect our rights and users. If Sablefort is involved in a merger or acquisition, we will notify affected customers.

Data retention

We keep account and encrypted vault data for as long as your organization maintains its account, and for a limited period afterward as needed to comply with legal obligations and resolve disputes. Diagnostic data is retained for a shorter period. Business and Enterprise plans can configure custom retention settings.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us or your organization's administrator. We offer a Data Processing Addendum for customers subject to the GDPR and similar laws.

Security

Your vaults are encrypted on your device and stay encrypted in transit and at rest. For more on how we protect your data, see our security overview. No system is perfectly secure, but we work continuously to protect your information.

Children

The Services are intended for use by organizations and are not directed to children. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you through the Services.

Contact us

Questions about this policy or your data? Contact us or reach our team through the support portal.