Privacy Policy
Template — requires legal review before publication. Placeholders in [brackets] must be completed.
Last updated: [DATE]
This Privacy Policy explains how [LEGAL ENTITY NAME] ("we") collects and uses personal data when you use OwlXBrowser (the "Service").
1. Data we collect
| Category | Examples | Why |
|---|---|---|
| Account | Name, email, password hash, 2FA status | To create and secure your account |
| Billing | Plan, invoices, payment status (card details are handled by our payment provider) | To charge for paid plans |
| Devices | Device name, OS, app version, a hashed machine identifier, IP address, last seen time | To sign in desktop apps and let you revoke them |
| Usage & security logs | Sign-ins, security-relevant actions, IP address | To protect accounts and investigate abuse |
| Support | Messages you send us | To answer you |
2. Data we do not collect
Browser profile contents (cookies, local storage, history) synchronized to the cloud are encrypted on your device. We store only ciphertext and do not have the keys to read it. Proxy passwords are stored encrypted and never logged.
3. Legal bases
We process data to perform our contract with you, to comply with legal obligations, and for our legitimate interests in securing and improving the Service. Where required, we ask for consent.
4. Sharing
We share data only with service providers that help us run the Service — hosting ([HOSTING PROVIDER]), email delivery ([EMAIL PROVIDER]), payments ([PAYMENT PROVIDER]), file storage ([STORAGE PROVIDER]) — under data processing agreements, or when required by law.
5. International transfers
[Describe transfer mechanisms, e.g. Standard Contractual Clauses, if data leaves your users' region.]
6. Retention
Account data is kept while your account is active. When you delete your account we anonymize personal data promptly and keep billing records for the period required by law ([X] years). Encrypted profile snapshots are deleted within [30] days.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to or restrict processing. You can delete your account from Dashboard → Settings. For other requests, contact [PRIVACY EMAIL].
8. Security
We use encryption in transit and at rest, client-side encryption for profile data, hashed passwords, optional two-factor authentication and audit logging.
9. Children
The Service is not intended for anyone under 18.
10. Changes
We will notify you of material changes by email or in the dashboard.
11. Contact
[LEGAL ENTITY NAME], [ADDRESS] — [PRIVACY EMAIL].