Privacy policy

Our privacy policy, of course, complies with the General Data Protection Regulation (GDPR). In this privacy policy, we mention what we know about you, what we do with the information and why we need it. You can always withdraw your consent and request us to delete your data. Visit our dedicated GDPR page, to learn more about the regulation.

During the installation and sign up procedure AxCrypt may contact one of our servers, if you allow it, and send us some minimal information.

This information is limited to:

• Your email address.

• Your operating system version, i.e. Windows Vista/2008/7/8/10/11 etc.

• Your selected language, i.e. English or French etc.

• The product version being installed.

In addition to specific sign up information, when a device contacts a server of HTTP some information is always made available and we log this. This may include:

• Your IP-address.

• The date and time.

• The URL accessed on our server.

We also log some additional specific events that are determined by the server access and internal procedures. This includes:

• What type of emails we automatically send to you (activation, welcome etc).

• When an unexpected error (exception) occurs.

All our servers are physically located in Sweden. We do not store any information created by the use of AxCrypt as described above anywhere else. For certain events, emails are generated, for example, non-delivery reports from your email provider or error logs. These emails may be sent to our staff who may be using commercial email service providers with international data centers.

Cloud Storage Integration

The AxCrypt mobile application securely persists session-related data within its isolated local storage environment, when connecting a cloud storage account.

The session- related information are:

• Access token, refresh token, scope, token type, and token expiry duration

• Account ID, user ID, and session state (only applicable for OneDrive and Dropbox )

This information is automatically removed upon uninstallation, or can be cleared manually using the "Clear All Settings" option within the app.

AxCrypt only accesses your cloud files when you perform specific actions- such as encrypt, decrypt, open, or key share a file. The AxCrypt application temporarily downloads these files for processing and securely deletes them from your device immediately after the operation is complete.

AxCrypt does not transmit, retain, or share file content or metadata externally. All actions take place locally on your device.

This applies to Google Drive, OneDrive, and Dropbox.

Business

When creating an AxCrypt Business subscription, we do ask some additional information. This may include:

• Address

• VAT number (for EU customers)

We use this information to make VAT deduction possible for EU companies, and to display on invoices. This information is also managed within a third party Customer Relationship Management (CRM) system.

Why do we need this information?

It’s obvious why we need some of the information. We try to keep the amount of information logged and stored to a minimum, and we store no personal or sensitive information except your email address. Any confidential information you store on our servers is encrypted with your password, which we do not store or know, except briefly during the server interaction.

The other information is practical for us to see how and where AxCrypt is being used, so as to better prioritize development. It also to gives us a nice warm feeling seeing how much it’s being used!

We also use the information logged to trace the events of usage when we receive and work with support requests. It has proven to be very helpful for us and improves the quality of support by for example seeing when last a successful sign in was made.

Page and service functionality

Cookies are used in the operation and presentation of data from websites. Such cookies may include language code information for the language selected by the user. It can be cookies with information that supports the load balancing of the system so that all users are guaranteed the best possible experience. For services that require login or search, cookies can be used that ensure that the service presents data to the right recipient.

Web analytics and cookies

As an important part of the work of creating a user-friendly website, we look at the user pattern of those who visit the site. We analyze user behaviour to make the user experience better. The purpose of using cookies is therefore to improve the customer experience. To analyze the information, we use the analysis tool Google Analytics. Google Analytics uses cookies/cookies (small text files that the site stores on the user's computer), which records the user's IP address, and provides information about each user's online movement. Examples of what the statistics give us answers to are; how many people visit different pages, how long the visit lasts, which sites the users come from and which browsers are used. None of the cookies allows us to associate information about your use of the site with you as an individual. Cookie data is automatically deleted 14 months after registration. You can do it yourself and manage the use of cookies by adjusting settings on your browser. The information collected by Google Analytics is stored on Google's servers in the United States. Information received is subject to Google guidelines for Privacy. An IP address is defined as personal information because it can be traced back to a particular hardware and thus to an individual. We anonymize the user's IP address before the information is stored and processed by Google. Thus, the anonymized IP address cannot be used to identify the individual user. Your IP address is also logged for a short period by our web servers. The user's IP-address, time of day, website address, HTTP status, number of bytes sent, HTTP referrer and HTTP user agent is logged for 15 days. Beyond this point, the data is deleted.

If you understand, accept, and agree to the aforementioned policies, terms, and conditions outlined above, please click the Sign in button to proceed to your account. By proceeding, you acknowledge that your entered name will serve as your electronic signature to validate the consent. If you do not comprehend, accept, or agree to the aforementioned policies, terms, and conditions, then please do not click the Sign in button.

Search

We store information about which keywords users use on our sites through Google Analytics. The purpose of the storage is to make our information offer better. The usage pattern for search is stored in aggregate form. Only the keyword is stored, and they cannot be linked to other user information such as IP addresses.

Forum / Share/tips-service

The "Share with others'' features is voluntary and can be used to forward links to the site by email, or to share the content of social networking sites such as Facebook or Twitter. Information about tips is not logged with us but is only used there and then to post the tip of the social networking site. However, we cannot guarantee that the online community will not log this information. All such services should, therefore, be used wisely. You may contact the relevant service provider or online community to receive information about its collection, use, processing, and personal data protection. If you use the email feature, we only use the e-mail addresses given to forward the message without any form of storage.

Newsletter

When you sign up with us, you do agree that we may send you occasional emails such as newsletters, offers and information about new and updated products and services from us. In order for us to be able to send an email, you must register an email address. The legal basis for processing for this purpose is consent, cf. GDPR Article 6, paragraph 1, letter a. This information is not shared with other businesses and is deleted when we are told that you no longer wish to receive information from us. You can opt-out, i.e. unsubscribe, at any time by clicking the link provided for this in such emails. HubSpot is our data processor for the newsletter.

Sharing information

We may share your information: With the public if you submit content to one of our forums, such as blog comments, social media posting, or other features of our services that are publicly visible; with third parties such as other sites that integrate with our API or our Services; or those with an API or service that we integrate with; Any necessary third party engaged by us, including data processors, vendors, consultants, marketing partners, and other service providers who need access to such information to perform work on our behalf; In response to an information request by a competent authority if we believe disclosure is under or otherwise required by applicable law, regulation, license or legal process; if we otherwise notify you and you consent to the sharing; and in an aggregate and / or anonymous form which cannot be reasonably expected to be used to identify you.

Social Media

In addition to this website, we maintain social media sites on Twitter, Facebook, Instagram, YouTube and LinkedIn. If you visit one of these presences, personal data may be transmitted to the provider of the social network. We draw your attention to the fact that user data may be transferred to a server in a third-party country and may therefore be processed outside the European Union.

In addition to the storage of the specific data you have entered in this social medium, further information may also be processed by the provider of the social network. If you are logged into the network with your personal user account while visiting the corresponding website, this network can assign the visit to this account. The purpose and scope of the data collection by the respective medium and the further processing of your data there, as well as your rights in this regard, can be found in the respective provisions of the respective person responsible, e.g. below:

• Google/YouTube:Privacy statement

• Twitter:Privacy statement

• Instagram:Privacy statement

• LinkedIn:Privacy statement

• Facebook:Privacy statement

Transfer of data to third parties

Customer Relationship Management (CRM) - Hubspot HubSpot is an integrated software solution with which we cover various aspects of our online marketing activities, among contact management via the CRM system. The legal basis for the use of the services of HubSpot is our rightful interest according to art. 6 I f GDPR due to the optimization of our marketing measures and the improvement of our service quality on the website.

HubSpot meets the minimum requirements for legally compliant order data processing by concluding the European standard data protection clause. In addition, there is a Data Processing Agreement (DPA) with HubSpot. This ensures that HubSpot uses the user’s data only within the framework of EU data protection standards and does not pass them on to third parties. For more information, please refer to HubSpot’s data privacy policy.

Changes to the Privacy Policy

Our privacy policy may be updated from time to time without prior notice. Please check here for the currently valid policy. If you do not accept the new changes, we may not be able to provide you with the services you request.

Contact

Should you have any specific questions about what we need a particular piece of information for, or if you want your data removed, please contact us at support@axcrypt.net

If you are a Business users, and do not want to be included in our CRM system, please contact us at business@axcrypt.net

Governing law and venue

This privacy statement is governed by Swedish law. Venue is Stockholm District Court.