Privacy Policy

1. Introduction

Encrypted Clipboard Manager ("we", "our", or "the Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our browser extension and web application.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Password (hashed using bcrypt and securely stored)

2.2 Clipboard Data

The browser extension captures clipboard data locally on your device. Supported data types include:

• Plain text
• JSON data
• URLs, IP addresses, phone numbers, and other detected patterns

Important: Clipboard data is processed and stored locally in your browser. We do NOT collect, transmit, or store your clipboard data on our servers unless you explicitly enable the cloud sync feature.

2.3 Cloud Sync Data (Optional Feature)

Password-Based End-to-End Encryption: If you enable cloud sync, your clipboard data is encrypted on your device using a password-derived encryption key before transmission. We implement end-to-end encryption where:

• Your data is encrypted on your device using your encryption password before sync
• Only encrypted data is transmitted and stored on our servers
• We cannot decrypt or access your synced clipboard data
• You must provide your encryption password to decrypt data on other devices

This is an optional feature you must explicitly enable. Your clipboard never leaves your device unencrypted. We store only the encrypted data, which we cannot read or access.

Device identification information (browser fingerprint) is stored to help you manage synced data across multiple devices.

2.4 Usage Analytics & Tracking

No Tracking Policy: We do NOT collect, store, or transmit any usage analytics, telemetry data, or behavioral tracking. The extension operates entirely locally except for optional cloud sync.

2.5 Payment Information

Payment processing is handled by Dodo Payments. We do not store your credit card information. We only receive transaction confirmation and subscription status.

2.6 Support Tickets

When you contact support, we store:

• Your messages and support requests
• Screenshots you voluntarily upload
• Ticket metadata (status, priority, category)

3. How We Use Your Information

We use collected information for:

• Providing and maintaining the Service
• Processing your subscription and payments
• Enabling cross-device sync (if opted in)
• Responding to support requests
• Sending important account notifications
• Preventing fraud and abuse

4. Data Storage and Security

End-to-End Encryption: We implement industry-standard security measures to protect your data:

• Password-based encryption: Cloud sync data is encrypted on your device using your encryption password before transmission
• PIN Lock encryption: When you enable PIN lock, your local clipboard data is encrypted and stored in a separate IndexedDB store, only decrypted when you unlock with your PIN
• User-controlled encryption: Only you have your encryption password and PIN - we cannot decrypt your data
• Account security: All account passwords are hashed using bcrypt (never stored in plain text)
• Transmission security: All data transmission uses HTTPS/TLS encryption
• Local storage: Clipboard data is stored unencrypted locally in your browser's IndexedDB for fast fuzzy search. Use PIN lock to encrypt it.

5. Data Sharing and Third Parties

We do NOT sell your personal information. We only share data with:

• Dodo Payments: For payment processing (required for subscriptions)
• Cloud Hosting Provider: For server infrastructure (data is encrypted)
• Legal Authorities: If required by law or to protect our rights

6. Your Rights and Choices

You have the right to:

• Access: View your account data at any time
• Export: Download your stored data
• Delete: Request account deletion (removes all associated data)
• Opt-out: Disable sync features
• Correct: Update your account information

To exercise these rights, contact us at encrypted-clipboard-manager@nhrdev.com

7. Data Retention

Minimal Data Retention: We retain only the minimum data necessary for service operation:

• Account data: Until you delete your account
• Encrypted sync data: Until you disable sync or delete your account (we cannot read this data)
• Support tickets: For 2 years after resolution
• Payment records: As required by law (typically 7 years)
• Usage data: We do not collect or retain any usage analytics or behavioral data

Since we use zero-knowledge encryption, we cannot access or read your encrypted sync data even while it's stored on our servers. This data is retained only to enable your cross-device synchronization.

8. Browser Extension Permissions

Local-Only Operation: Our extension operates entirely within your browser and never transmits your data to external servers except for optional sync functionality (which is end-to-end encrypted). The extension requires these permissions:

• Clipboard Read/Write: To save your copied items and allow you to paste from your history
• Active Tab: To paste content into the current website you're viewing
• Storage: To store your encrypted clipboard history locally on your device

These permissions are necessary for core functionality. The extension only accesses your clipboard actions and never collects, tracks, or reports any usage data to external services.

9. Children's Privacy

Our Service is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

10. International Users

Our servers are located in Singapore. By using the Service, you consent to the transfer of your information to our servers. We comply with applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email notification for major changes

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: encrypted-clipboard-manager@nhrdev.com
• Support: Use the in-app support ticket system