Privacy Policy
Last updated: September 09, 2025
Introduction
Welcome to Cryptio ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website, purchase our encryption software, or use our services.
Data Controller
Cryptio, operated by Transio Technologies (Francis Pahipang Namouz), is the data controller responsible for your personal data.
Zero-Knowledge Encryption
Cryptio uses zero-knowledge encryption architecture. This means:
- We cannot access your encrypted data or encryption keys
- Your files and data remain completely private to you
- All encryption and decryption happens locally on your device
- We do not store copies of your encryption keys or encrypted content
Information We Collect
Personal Data
We may collect the following types of personal information:
- Identity Data: Name, username or similar identifier
- Contact Data: Email address, billing address
- Technical Data: IP address, browser type, operating system, software version
- Usage Data: Information about how you use our website and software (anonymized)
- Marketing Data: Your preferences in receiving marketing communications
How We Use Your Information
We use your personal data for the following purposes:
- To provide and maintain our encryption software and services
- To process your purchases and manage your software licenses
- To provide technical support and customer service
- To notify you about software updates and security patches
- To improve our software and services based on usage patterns
- To send you marketing communications (only with your consent)
- To comply with legal obligations and enforce our terms
What We Don't Collect
Cryptio's zero-knowledge architecture means we do not collect:
- Your encryption keys or passphrases
- Content of your encrypted files or data
- File names or folder structures you encrypt
- Personal information stored in secure notes
- Passwords generated by our password tools
- Any data that could compromise your privacy or security
Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Contractual necessity: To perform our contract with you when you purchase our software
- Legitimate interests: To operate and improve our business and services
- Consent: For marketing communications and non-essential cookies
- Legal obligation: To comply with applicable laws and regulations
Data Sharing and Third-Party Processors
We share your personal data with:
Payment Processing
Paddle: Processes payments for our software licenses. Paddle is PCI DSS compliant, ensuring your payment information is handled securely according to industry standards.
Other Third Parties
- Service providers who help us operate our business (hosting, analytics)
- Professional advisers including lawyers and accountants
- Tax and government authorities, regulators, and other authorities
- Law enforcement when required by applicable law
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
Data Security
We have implemented comprehensive security measures to protect your personal data:
- Zero-knowledge encryption ensures we cannot access your encrypted data
- All data transmissions use TLS encryption
- Access to personal data is limited to authorized personnel only
- Regular security audits and vulnerability assessments
- Secure data centers with physical access controls
- Employee training on data protection and security practices
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Account data is typically retained for the duration of your subscription plus 7 years for tax and legal compliance purposes.
Your Legal Rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:
- Request access to your personal data
- Request correction of your personal data
- Request erasure of your personal data
- Object to processing of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Withdraw consent where we rely on consent to process your data
To exercise any of these rights, please contact us at privacy@cryptio.com.
Cookies
We use cookies and similar technologies to enhance your experience on our website. You can manage your cookie preferences through our Cookie Banner when you first visit our site, or by adjusting your browser settings.
For more information about the cookies we use, please see our Cookie Policy.
Children's Privacy
Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.
International Transfers
We operate globally and may transfer your data to countries outside your country of residence. When we transfer personal data outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place.
Changes to This Privacy Policy
We may update this privacy policy from time to time by posting the updated version on our website. We encourage you to review this privacy policy periodically.
Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:
Email: support@getcryptio.com
Support: support@getcryptio.com
Complaints
If you are not satisfied with our response to your concern, you have the right to lodge a complaint with your local data protection authority.