1. Introduction
Leet Service ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our password management service (the "Service").
By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account
- Profile Information: Optional profile picture and display preferences
- Credential Data: Encrypted passwords, usernames, URLs, and notes you choose to store
- Team Information: Team names, member email addresses, and roles when using team features
- Payment Information: Billing address and payment method details (processed by our payment provider)
2.2 Information Collected Automatically
- Usage Data: How you interact with our Service, features you use, and actions you take
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Log Data: IP address, access times, pages viewed, and referring URL
- Cookies: Session cookies and preference cookies (see Section 7)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our Service
- Process transactions and send related information
- Send you technical notices, updates, security alerts, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze trends, usage, and activities in connection with our Service
- Detect, investigate, and prevent fraudulent transactions and unauthorized access
- Personalize and improve your experience
- Comply with legal obligations
4. Data Security
Security is at the core of our Service. We implement robust security measures to protect your data:
- Encryption at Rest: All credential data is encrypted using AES-256 encryption before storage
- Encryption in Transit: All data transmission uses TLS 1.3 encryption
- Zero-Knowledge Architecture: Your master password is never transmitted to or stored on our servers
- Two-Factor Authentication: Optional 2FA for enhanced account security
- Regular Security Audits: Periodic security assessments and penetration testing
- Secure Infrastructure: Hosted on SOC 2 Type II certified cloud infrastructure
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
- With Your Consent: When you explicitly authorize sharing (e.g., team collaboration)
- Service Providers: With trusted partners who assist in operating our Service (under strict confidentiality agreements)
- Legal Requirements: When required by law, court order, or governmental authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Safety and Security: To protect the safety, rights, or property of Leet Service, our users, or others
6. Your Rights (GDPR)
If you are a resident of the European Economic Area (EEA), you have certain data protection rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another organization
- Right to Object: Object to our processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
To exercise any of these rights, please contact us at privacy@leetservice.com.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- Account Data: Retained until you delete your account
- Credential Data: Retained until you delete individual credentials or your account
- Audit Logs: Retained for 1 year for security and compliance purposes
- Backup Data: Retained for 30 days after deletion for recovery purposes
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with all service providers
- Compliance with applicable data protection frameworks
10. Children's Privacy
Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide a more prominent notice, such as an email notification.
12. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Questions? Contact us at privacy@leetservice.com