AuthHub Privacy Policy

Last updated: 2025-02-17

Your privacy is important to us. This Privacy Policy explains how we collect, use, protect, and share information when you use AuthHub, including our web service and the Google Chrome extension.

1. Information Collection

We collect the following types of information to ensure the security and functionality of AuthHub:

• Account Information: Name, email, and login details provided during registration.
• Usage Data: Records of access and activities within the platform for auditing and security purposes.
• TOTP Keys: Stored in encrypted form, without direct access by AuthHub administrators.
• Device Data: We provide information about the browser and device used for access to prevent unauthorized access.

2. Use of Information

The information collected is used to:

• Provide and operate AuthHub services securely.
• Protect accounts against unauthorized access.
• Improve user experience based on usage patterns.
• Comply with legal requirements and ensure compliance with security standards (LGPD, ISO 27001).

3. Information Sharing

We do not sell, rent, or share your personal information with third parties, except in the following cases:

• Legal Compliance: When required by law or regulatory authorities.
• User Protection: To investigate suspicious activities or security breaches.
• Infrastructure Services: We may use hosting providers and cloud services to operate our platform.

4. Data Security

We implement rigorous measures to protect your data:

• End-to-end encryption for all stored TOTP keys.
• Strong authentication and granular access control.
• Continuous monitoring to detect and mitigate threats.

Users also play a key role in security, and should use strong passwords and enable multi-factor authentication when accessing the platform.

5. Your Rights

According to data protection laws, you have the following rights:

• Access and correct your personal information.
• Request deletion of your account and stored data.
• Revoke consent for the use of personal data.

To exercise your rights, please contact our support: [email de suporte].

6. Use of the Chrome Extension

Our Chrome extension functions as a secure access facilitator, without collecting additional information beyond what is necessary to generate TOTP codes.

• No information is stored locally without encryption.
• The extension communicates exclusively with the AuthHub service, without sending data to third parties.

7. Changes to this Policy

We may update this Privacy Policy periodically. We recommend that users review this page regularly to stay informed about our privacy practices.

Questions? Contact us by email: contact@coffee-code.tech.