https://alias.secureinseconds.com/privacy

Privacy Policy
Last Updated: 11/06/2025

Introduction
Welcome to SecureAlias ("we", "us", "our"). We are committed to protecting your privacy and handling your personal information transparently and securely. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

We strive to be respectful of your privacy and align our practices with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Please read this policy carefully.

Information We Collect
We collect information necessary to provide and improve our Service. This includes:

Account Information: Your email address and a securely hashed version of your password when you register using credentials. We do not store your plain text password.
Alias Information: The email aliases you create, your real email address they forward to, and any optional descriptions you provide.
Email Forwarding Metadata: When an email is forwarded through an alias, we log metadata for troubleshooting and operational purposes. This includes the sender address, the alias used, the timestamp, and the email subject line. We explicitly DO NOT store the body content of forwarded emails.
Email Reply Metadata: If you use the email reply feature, we temporarily store a reply token and log metadata about the relayed reply. This includes the alias used, the original sender's address (who the reply is sent to), the timestamp, and a unique identifier for the reply transaction. We explicitly DO NOT store the body content of emails during the reply process.
Multi-Factor Authentication (MFA) Information: If you enable MFA, we store your encrypted MFA secret and hashed recovery codes to secure your account.
Payment Information: If you subscribe to a paid plan, we collect billing information necessary to process payments through our secure third-party payment processor, Stripe. This may include your name, billing address, and payment method details. We do not directly store your full credit card number; this is handled entirely by Stripe. We store your Stripe Customer ID and subscription status.
Usage Information: We may collect technical information about how you interact with our Service, such as IP addresses, browser type, and access times, primarily for security monitoring and service improvement.
How We Use Your Information
We use the information we collect for the following purposes:

To provide, operate, and maintain the SecureAlias Service, including creating aliases and forwarding emails.
To facilitate the secure relaying of replies sent via your aliases.
To process your registration and manage your account, including authentication and security (like MFA).
To process payments and manage subscriptions via Stripe.
To communicate with you, such as sending important service announcements, security alerts, verification emails, or responding to your support requests.
To monitor and analyze usage trends to improve the Service and user experience.
To troubleshoot email delivery issues using the collected metadata (excluding email body content) for both forwarding and replies.
To enforce our terms and conditions and comply with legal obligations.
To protect the security and integrity of our Service and users.
Information Sharing and Disclosure
We are committed to your privacy and do not sell your personal information. We may share your information only in the following limited circumstances:

Service Providers: We share necessary information with third-party service providers who perform services on our behalf, such as:
Mailgun: For sending verification emails and forwarding emails from your aliases to your real inbox.
Stripe: For processing payments and managing subscriptions securely.
These providers are obligated to protect your information and use it only for the specific services they provide to us.
Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of SecureAlias, our users, or others.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to the receiving entity upholding the commitments made in this Privacy Policy.
Data Security
We implement reasonable technical and organizational security measures designed to protect your personal information from unauthorized access, use, alteration, or disclosure. This includes using password hashing, encryption for sensitive data like MFA secrets, access controls, and relying on reputable third-party providers like Stripe for payment processing.

However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

Data Retention
We retain your personal information for as long as necessary to provide the Service, fulfill the purposes outlined in this policy, comply with our legal obligations (e.g., financial record-keeping), resolve disputes, and enforce our agreements. Email forwarding metadata (excluding body content) is retained for a limited period for troubleshooting purposes.

Reply tokens are stored until they expire or are used. Reply log metadata (excluding body content) is also retained for a limited period for troubleshooting and service operation.

Your Rights (Access and Correction)
Under Australian privacy law, you have rights regarding your personal information. You have the right to request access to the personal information we hold about you and to request that we correct any inaccuracies.

You can manage most of your account information directly through your account settings page. For other requests regarding access or correction, please contact us using the details below.

Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: securealias@alias.secureinseconds.com