Privacy Policy

1. Overview

EternaKeys ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Zero-Knowledge Architecture

Your vault content is encrypted on your device before transmission using AES-256-GCM with keys derived from your passphrase via Argon2id. We never receive, store, or have access to your plaintext vault content or vault passphrase.

3. Data We Collect

3.1 Account Information

• Email address (for authentication and notifications)
• Legal name (optional, for authorized access documentation)
• Passkey credential identifiers (WebAuthn public keys, for authentication)
• Hashed account password (stored only for administrative accounts, not standard user accounts)

3.2 Billing and Subscription Information

If you subscribe to a paid plan, payments are processed by Stripe. Card details are entered on Stripe-hosted pages and never reach EternaKeys servers. We do store, in plaintext, the identifiers and status Stripe returns to us:

• Stripe customer and subscription identifiers
• Subscription status and billing period (for example "active", "past_due", "canceled")
• Your plan tier and its expiry

This billing data is not covered by the zero-knowledge architecture described in section 2. It is ordinary account data, readable by EternaKeys, and is kept separate from your encrypted vault contents — neither EternaKeys nor Stripe can decrypt your vault.

3.3 Operational Metadata

To provide the service, we store operational metadata including:

• Vault item types, sizes, and timestamps
• Designated recipient records
• Session and authentication data (IP addresses, user agents)
• Audit log entries (event types, timestamps — never vault content)
• Assent records (legal acknowledgments with timestamps)

3.4 Encrypted Data

We store encrypted vault data (ciphertext) that we cannot decrypt. This includes encrypted item content, encrypted titles, and encrypted file attachments.

3.5 Documents From Designated Recipients

If document upload is enabled for access requests, a designated recipient may upload documents such as a death certificate, a court order, letters of administration, or their own photo ID. These documents often contain sensitive personal information about the person who died and about the recipient.

• Each file, including its name and type, is encrypted on the recipient's device to keys held only by EternaKeys reviewers, before it is uploaded. Our servers store it encrypted and cannot read it.
• A reviewer opens it in their own browser to decide the request. The vault owner does not see these documents.
• We store, in plaintext, the kind of document the recipient selected, its size, and when it was added, and we record each time a reviewer opens it.
• A person reviews the documents. EternaKeys does not claim to authenticate them.

4. How We Use Your Data

• To provide, maintain, and improve the Service
• To authenticate your identity
• To facilitate the Authorized Access Trigger workflow for designated recipients
• To send transactional notifications (security alerts, authorized access requests)
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers that process data on our behalf: hosting, database and file storage
• Email delivery (Google Workspace), which carries the transactional emails we send you, including the address they are sent to and the message text
• Rate limiting (Upstash), which receives request identifiers such as an IP address or email address inside short-lived rate-limit keys, kept for up to one hour
• Payment processing (Stripe), which receives the billing details you enter on its own hosted checkout and returns the subscription identifiers described in section 3.2
• Error monitoring (Sentry), which receives diagnostic reports from the application in production. These reports are scrubbed before transmission so that vault ciphertext, key material, decrypted content, and single-use credentials such as invitation or verification tokens are never included
• Law enforcement when required by valid legal process (note: we can only provide ciphertext and metadata, not plaintext vault content)

5.1 Where Your Data Is Processed

EternaKeys is operated from the United States, and the Service is hosted there:

• Account, operational, and encrypted vault records are stored in a database hosted by Supabase on Amazon Web Services in the United States (us-east-2, Ohio)
• Encrypted file attachments are stored as ciphertext in Cloudflare R2 object storage
• The application is hosted on Vercel

If you use EternaKeys from outside the United States, your personal data is transferred to, stored in, and processed in the United States, where data protection law may differ from the law of your country. Vault content is encrypted on your device before it leaves it, so what is transferred and stored is ciphertext that we cannot decrypt, wherever it is held. Your account, billing, and operational data described in section 3 are not encrypted in that way.

6. Data Retention

Active account data is retained while your account is active. Cancellation and deletion requests are reviewed and processed under our documented operational and legal requirements. Encrypted data and audit records may be retained for a limited period when necessary for security, compliance, dispute resolution, or backup lifecycle purposes. We do not claim that submission of a request alone immediately deletes encrypted vault data.

Documents uploaded with an access request are kept while the request is open and for up to one year after it is decided, so the decision can be audited or disputed, and are then deleted.

7. Your Rights

You may:

• Access your account information
• Export your encrypted vault data at any time
• Request account deletion
• Update your account information

8. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies or third-party analytics cookies. See our cookie consent notice for details.

9. Security

We employ industry-standard security measures including TLS encryption in transit, server-side rate limiting, CSRF protection, and strict Content Security Policy headers. Vault content is protected by client-side encryption that we cannot bypass.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice.

12. Contact

For privacy inquiries, contact us at privacy@eternakeys.com.