Privacy Policy

Overview

Salattu is a password manager. This Privacy Policy explains what data we collect, how we use it, how we protect it, and your choices. It specifically reflects how our backend (PostgreSQL/SQLx) store and process information.

By creating an account or using Salattu, you agree to this Policy.

Controller and Contact

For users in the EU/EEA and the UK, the data controller is ArikSquad. You can contact us at ariksquad@mikart.eu for privacy matters.

This is not a finished product

TODO: The infrastructure is changing on a daily basis and this Privacy Policy may not reflect the current state. We are committed to transparency and will update this Policy when the structure is done.

But in short: We do not sell personal data and cannot disclose plaintext vault contents.

International Data Transfers

Your data may be processed outside your country. Where we transfer personal data outside the EU/EEA/UK, we rely on an adequacy decision or on Standard Contractual Clauses (SCCs) and implement supplementary measures as needed.

Retention

• Account and metadata: Retained while your account is active and for a reasonable period afterward to comply with legal obligations or resolve disputes.
• Encrypted vault contents: Retained while your account is active, or until you delete items or your account.
• Activity logs: Retained for a limited period for security and troubleshooting, then deleted or aggregated.

Your Rights

Under the GDPR, you have the right to:

• Access, rectification, erasure, restriction, and objection.
• Data portability.
• Withdraw consent where processing is based on consent.

You can exercise rights in‑app (e.g., item/account deletion) or by contacting us at ariksquad@mikart.eu. We will verify your identity and respond within applicable timelines.

Complaints

You can lodge a complaint with your local supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto): https://tietosuoja.fi/en/home

Children’s Privacy

Salattu is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate action.

Changes to This Policy

We may update this Policy to reflect changes in our service or the law. We will post the updated version here and update the “Last updated” date. Material changes may be communicated by additional notice.

Contact Us

If you have questions or requests about this Policy or your data:

• Email: ariksquad@mikart.eu
• Issues: https://github.com/ArikSquad/salattu/issues

Last updated: 2025‑09‑20