Privacy Policy

The data controller is WATIZI, a French simplified joint-stock company (SAS) with share capital of €1,000, registered with the Bordeaux Trade and Companies Register under SIREN 102 877 412 (SIRET 102 877 412 00019), with registered office at 29 B Chemin de la Tuilière, 33610 Cestas, France. VAT number: FR73102877412. SecurSSH is a brand operated by WATIZI. For any data-protection question, contact our Data Protection Officer at dpo@securssh.com.

• Account data - email address, hashed master password verifier (PBKDF2 100,000 iterations), team membership.
• Vault content - credentials, host records, snippets, all encrypted client-side. The server stores ciphertext only and cannot access plaintext vault content.
• Audit log - connection metadata such as timestamp, actor, host identifier and action type. Retention is 24 months on Team plans and unlimited on Enterprise contracts.
• Billing - handled by Stripe. We never store full primary account numbers (PAN); only billing identifiers, invoice metadata and customer reference are stored on our side.
• Usage analytics - Google Tag Manager (container GTM-P7PRZ37K) and Google Analytics 4. Events are anonymised by default (IP truncation, no advertising features enabled).

• Contract execution (Article 6(1)(b)) - account management, vault synchronisation, billing.
• Legitimate interest (Article 6(1)(f)) - security audit log, fraud prevention, abuse detection.
• Consent (Article 6(1)(a)) - analytics cookies and other non-essential cookies.
• Legal obligation (Article 6(1)(c)) - tax records, accounting, regulatory or compliance audits.

• Active account - data is retained for as long as the account exists.
• After deletion - 30-day grace period covering backup rotation, after which production and backup systems are permanently purged.
• Audit log - per-plan retention: 24 months (Team), unlimited (Enterprise), or as configured under contract.
• Billing data - 10 years, in line with EU accounting and tax obligations.

• Right of access (Article 15) - full data export available on request.
• Right to rectification (Article 16) - directly available from the account settings panel.
• Right to erasure (Article 17) - built into the product as a one-click account deletion. This is a shipped feature, not a manual procedure.
• Right to data portability (Article 20) - encrypted JSON export of vault and account data.
• Right to object / restrict processing (Article 21).
• Right to lodge a complaint with a supervisory authority - for example the CNIL (France), Datatilsynet (Denmark), the BfDI (Germany), the AP (Netherlands), or the supervisory authority of your EU member state of residence.

To exercise any of these rights, contact privacy@securssh.com.

Personal data is stored and processed exclusively inside the European Union. Production workloads run from EU data centre regions (Frankfurt, Amsterdam) on EU-headquartered infrastructure.

SecurSSH does not transfer personal data to the United States for storage. Following the SCHREMS II ruling, this removes the legal uncertainty associated with transfers outside the EEA.

Sub-processors are listed in section 8 below. Any future change of sub-processor that would affect data residency is announced at least 30 days in advance.

• Strictly necessary - session cookie, CSRF token, locale preference. These are required for the Service to function and do not require consent.
• Analytics - Google Tag Manager and Google Analytics 4. Loaded only after consent.
• No third-party marketing cookies are deployed on the SecurSSH website or product.

• Stripe Payments Europe Ltd. (Ireland) - payment processing.
• Google Ireland Ltd. (Ireland - EU representative for Google) - analytics via Google Tag Manager and Google Analytics 4.
• European hosting provider — details disclosed under NDA - production hosting and backups.
• European transactional email provider — details disclosed under NDA - transactional email delivery.

A Data Processing Agreement is available on request to Customers on Team and Enterprise plans. The DPA includes Standard Contractual Clauses (SCC) where applicable, the up-to-date list of sub-processors, retention windows, and security measures aligned with Article 28 GDPR.

To request the DPA, email dpa@securssh.com.

• End-to-end AES-GCM encryption of vault content, performed client-side.
• PBKDF2 with 100,000 iterations for master-password key derivation.
• Encryption in transit using TLS 1.3 across all SecurSSH endpoints.
• Tamper-evident audit log; unauthorised modifications break the chain and are detectable.
• Regular internal security reviews and least-privilege access controls for SecurSSH operators.
• Roadmap: SOC 2 Type II audit planned for H2 2026 (currently uncertified - not represented as acquired).

The Service is intended for professional use and is not directed at users under the age of 16. SecurSSH does not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us so we can delete the relevant records.

Material changes to this Privacy Policy are notified at least 30 days before they take effect, by email to active Customers and through an in-product banner. Non-material edits (typos, clarifications) are published with an updated revision date.

General data-protection inquiries: privacy@securssh.com.

Data Protection Officer: dpo@securssh.com.