Privacy Policy

This policy explains what Kryptix collects when you use the website, the desktop software and the account service, why we collect it and what we do with it. The short version: we keep the minimum needed to run your account and your subscription, we never see what you do inside your browser profiles, and we do not sell data.

1. What we collect

Account data

• Email address and a salted hash of your password (we never store the password itself).
• Your Telegram user ID and username, received when you verify your account through our Telegram bot; it is also used to send password-reset codes.
• Account status, plan, plan expiry, seat count and the date the account was created.

Licensing data

• A hashed device identifier for each computer that activates your account (used to enforce the per-account device limit and the one-trial-per-device rule), with the time of the last activation.
• Technical logs of licensing requests: timestamp, IP address, software version and the result. We keep them to detect abuse and to support you.

Order data

• Plan purchased, amount, currency, order ID, payment status and the time of payment. Payments are processed by Cryptomus; we receive confirmation of the payment and the wallet-level details the processor shares with merchants. We never receive card numbers (we do not accept cards).

Support and website

• Messages you send to support and the email address you send them from.
• Standard server logs from our hosting provider (Cloudflare): IP address, request path, user agent and time. The website does not use advertising trackers or third-party analytics. Your theme preference and login session are stored in your browser's local storage.

2. What we do not collect

• Anything that happens inside your browser profiles: pages visited, cookies, logins, form data, downloads, proxy credentials, automation flows and the data they process. All of this stays on your computer.
• Your real browser fingerprint, your real IP address as seen by websites, or the identities you create in the software.
• The contents of the credential vault used by RPA flows; it is encrypted on your device and never leaves it.

3. Why we use it

• To create and secure your account, verify you once through Telegram and let you reset your password.
• To activate your subscription on your devices, enforce device and trial limits and keep the software licensed.
• To process payments, record orders and answer questions about them.
• To respond to support requests and to send essential service messages, such as a plan that is about to expire.
• To prevent fraud and abuse and to protect the Service, our users and third parties.
• To comply with legal obligations.

Where data-protection law requires a legal basis, we rely on the performance of our contract with you (account, licensing, payments, support), our legitimate interest in keeping the Service secure and abuse-free, and compliance with law. We do not send marketing emails without your consent.

4. Who we share it with

We share personal data only with providers that help us run the Service, and only what they need:

• Cloudflare — hosting, networking, security and our database.
• Cryptomus — payment processing for cryptocurrency payments.
• Telegram — account verification and reset codes sent through our bot.
• Transactional email provider — service emails such as plan reminders, if enabled.

We may also disclose data where the law requires it, to enforce our Terms, or to protect the rights, safety or property of Kryptix, our users or others. We do not sell personal data and we do not share it with advertisers.

5. Retention

• Account and order data: for as long as your account exists, and afterwards as long as we need to keep records of payments and to resolve disputes (normally no longer than required by applicable accounting and tax rules).
• Licensing and security logs: up to 12 months, unless needed longer for an open investigation.
• Support messages: up to 24 months after the last message.
• Trial-eligibility records (hashed device, email and Telegram identifiers): kept so that the trial cannot be claimed again.

6. Security

Passwords are stored only as salted hashes, sessions use random tokens, administrative access is restricted and logged, and all traffic between the software, the website and our servers is encrypted. No system is perfectly secure; if we learn of a breach affecting your data we will inform you as the law requires.

7. Your rights

Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. To exercise any of these rights write to support@kryptixbrowser.com from the email address on your account. Deleting your account ends your subscription; records we must keep for payment or legal reasons are retained as described above.

8. International transfers

Our providers operate globally, so your data may be processed in countries other than your own. Where required we rely on appropriate safeguards, such as the providers' standard contractual clauses.

9. Children

The Service is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

10. Changes

We may update this policy; the current version and its effective date are always on this page. Material changes are announced on the website or by email.

11. Contact

Privacy questions and requests: support@kryptixbrowser.com.