Privacy Policy

What We Collect

• Account information: name, email address, password hash (Argon2id), timezone
• Estate data: item descriptions, contact information — all encrypted at rest (AES-256-GCM)
• Session data: secure HttpOnly session cookies, no persistent tracking cookies
• Billing data: subscription status; payment details are held by Stripe, not us
• Audit logs: redacted event records that never contain plaintext PII
• Operational logs: server logs with IP hashes (not raw IPs) where applicable

How We Protect Your Data

All sensitive estate fields (names, emails, phone numbers, account descriptions, notes) are encrypted at rest using AES-256-GCM with per-field keys. Category and title fields remain plaintext for filtering and display purposes.

Passwords are never stored. Only an Argon2id hash is stored. We do not have access to your plaintext password.

What We Don't Collect

• Payment card numbers or financial credentials — these are handled by Stripe
• Plaintext PII in audit logs or operational logs
• Passwords or private keys (and you should never store these in estate items)

Self-Hosted Aegis Core Users

If you use the open-source Aegis Core self-hosted version without Relay or Hosted services, your data stays entirely on your own infrastructure. Aegis project maintainers receive no telemetry or data from self-hosted deployments unless you opt into Relay or Hosted services.

Third-Party Services

• Stripe — subscription billing and payment processing
• Postmark — transactional email delivery
• Railway — hosting infrastructure

Each provider has their own privacy policy governing data they receive.

Data Retention and Deletion

You may export your data or request full account deletion at any time from account settings. See our Data Deletion page for details.

Contact

Privacy questions: support@aegisdms.life