← Back to TURUBA Technologies

Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains how TURUBA Technologies handles information for its websites and products, including Security Vault. It is intended to describe the current product and operational data flows accurately and may be updated as the service evolves.

1. Information We Collect

Depending on the features you use, Security Vault may process your name or username, email address, account and authentication information, security settings, security activity and alert records, active-session information, recovery information, and information you intentionally store in the vault such as saved credentials, security codes, notes, and encrypted files.

We may also process technical information needed to operate and secure the service, such as IP address, device or browser information, request timestamps, session identifiers, and security/rate-limiting events.

2. How We Use Information

We use information to create and authenticate accounts; verify email ownership; provide password, security-code and secure-file functionality; send authentication and recovery messages; maintain vault locking and session controls; detect and prevent abuse; maintain security logs and alerts; respond to support requests; troubleshoot service problems; and meet applicable legal or security obligations.

3. Security Vault Data

Security Vault is designed to apply security controls to stored credentials and files. Passwords are protected using password hashing, and vault data/files are protected using encryption mechanisms implemented by the service. Data is transmitted over HTTPS in production. We do not describe these controls as an absolute guarantee of security.

You are responsible for ensuring that you are authorized to store any information you place in the service and for protecting your account, master password, recovery information, and authentication devices.

4. Email and Service Providers

Security Vault uses third-party infrastructure and service providers where needed to operate the service. For example, email delivery for account verification and recovery messages may be handled through Brevo. Production application infrastructure may be hosted on a third-party VPS provider. Our company website may be hosted through a web hosting/CDN provider. These providers may process information only as needed for their services and under their applicable terms and privacy policies.

We do not intentionally sell your personal information to third parties.

5. Authentication, Biometrics and Device Storage

The mobile application may use device secure storage for authentication/session material and may use the device's biometric authentication facility when you enable biometric unlock. Biometric verification is performed by the device operating system; the app does not receive your raw biometric data.

6. Cookies and Similar Technologies

The web application may use necessary session cookies and similar technologies to keep users authenticated and maintain security. We currently do not rely on advertising or analytics SDKs in Security Vault. If optional analytics, advertising, or other tracking technologies are introduced, this policy and any required disclosures will be updated.

7. Data Retention

We retain information for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and perform legitimate operational functions. Retention periods can vary by data type and operational need.

8. Account and Data Deletion

Security Vault provides an account deletion path. When an account is deleted, account-associated records and user-owned stored data are intended to be removed, subject to technical limitations, backups, security records, and information we are legally required to retain.

You can also start a deletion request from our Account Deletion page.

9. Children's Privacy

Security Vault is not designed or marketed as a service for children. We do not knowingly target children with the service where prohibited by applicable law.

10. Your Rights

Depending on your location and applicable law, you may have rights concerning access, correction, deletion, restriction, or other processing of your personal information. Contact us to make a request.

11. Changes

We may update this policy when our products, providers, data practices, or legal requirements change. The latest version will be posted on this page with a revised date.

12. Contact

Privacy and data requests: support@turubatechnologies.com.