Privacy Policy

1. Who are we?

Password Crypt ApS provides the Pcrypt website, apps, browser extensions, software and related services.

Contact us using the details above if you have questions about this policy or our processing of personal data.

2. Our role

Password Crypt ApS is the data controller for personal data processed for our own purposes, including website visits, enquiries, support, resource requests, demo bookings, customer administration and our own user accounts.

When Pcrypt processes data for a business customer under its instructions, Password Crypt ApS may act as a data processor. That processing is also governed by the customer's agreement and data processing agreement with us.

3. Data we process

Depending on how you use Pcrypt, we may process:

• Contact and profile data such as name, email address, telephone number and company.
• Information submitted through support, demo and resource forms, including subject, message and selected materials.
• Account and subscription information.
• Technical data such as IP address, device, browser, timestamps and security or operational logs.
• Service usage information where necessary for operation, security and support.

Your master password is not intended to be stored on our servers. Content in your Pcrypt vault is protected through local encryption and Pcrypt's Zero-Knowledge architecture.

4. Purposes and legal bases

We process data to:

• Provide, administer and secure Pcrypt and perform agreements with customers and users.
• Answer enquiries, provide support, deliver requested resources and follow up on demo bookings.
• Prevent misuse, enforce rate limits and investigate security or operational incidents.
• Manage accounting and other legal obligations.
• Improve services and communications where we have a lawful basis.

Depending on the circumstances, processing is necessary to perform or prepare a contract, comply with a legal obligation, pursue legitimate interests in secure operations and customer service, or is based on your consent. You may withdraw consent at any time with future effect.

5. Forms and enquiries

When you use website forms, the information is emailed to the relevant Pcrypt recipient. If our HubSpot integration is enabled, contact and support information may also be registered there for customer follow-up and case management.

We temporarily use the IP address to limit automated or repeated form submissions.

6. Recipients and processors

We may share data with providers assisting with hosting, email, CRM, support, security and technical operations. Where they act as our processors, they may only process data under agreement and instructions.

We may also disclose data where required by law, necessary to establish or defend legal claims, or as part of a business transfer subject to appropriate safeguards.

If data is transferred outside the EU/EEA, we use a valid transfer mechanism and relevant supplementary safeguards where required.

7. Cookies and local storage

The website may use strictly necessary cookies or similar technologies to function and remember necessary choices. If we use non-essential technologies for analytics or marketing, we request consent before activation. You may withdraw such consent through the available cookie settings.

8. Retention and deletion

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law and documentation obligations. The period depends on the customer relationship, type of enquiry, security needs and accounting rules.

Data is deleted or anonymised when no longer needed. Customer data at termination is handled under the relevant customer and data processing agreements.

9. Security

We use appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access and disclosure. These include access controls, logging, encryption and security incident procedures.

10. Your rights

Under data protection law, you may have the right to:

• Access personal data we process about you.
• Correct inaccurate or incomplete data.
• Request erasure or restriction in certain cases.
• Object to processing based on legitimate interests.
• Data portability where the conditions apply.
• Withdraw consent.

Rights may be limited by law. Contact Support@pcrypt.com. We may request information necessary to verify your identity.

11. Complaints

You may complain to the Danish Data Protection Agency if you are dissatisfied with our processing:

12. Changes

We may update this policy when our services, providers or legal obligations change. The current version and update date are published here. We will provide appropriate notice of material changes.