Privacy Policy

What We Collect

• Account information: name, email address, password hash (Argon2id), timezone
• Estate data: item descriptions, contact information, all encrypted at rest (AES-256-GCM)
• Session data: secure HttpOnly session cookies, no persistent tracking cookies
• Billing data: subscription status; payment details are held by Stripe, not us
• Audit logs: redacted event records that never contain plaintext PII
• Operational logs: server logs with IP hashes (not raw IPs) where applicable

How We Protect Your Data

All sensitive estate fields (names, emails, phone numbers, account descriptions, notes) are encrypted at rest using AES-256-GCM with per-field keys. Category and title fields remain plaintext for filtering and display purposes.

Passwords are never stored. Only an Argon2id hash is stored. We do not have access to your plaintext password.

What We Don't Collect

• Payment card numbers or financial credentials, which are handled by Stripe
• Plaintext PII in audit logs or operational logs
• Passwords or private keys (and you should never store these in estate items)

Planned Self-Hosted Aegis Core

The self-hosted Aegis Core package is planned under AGPL-3.0 but is not published in this alpha release. When it becomes available, deployments without Relay or Hosted services will keep their data on infrastructure they control; Aegis project maintainers will receive no telemetry unless the deployment opts into a hosted service.

Third-Party Services

• Stripe: subscription billing and payment processing
• Brevo: transactional email delivery
• Railway: hosting infrastructure

Each provider has their own privacy policy governing data they receive.

Data Retention and Deletion

You may export your data or request full account deletion at any time from account settings. See our Data Deletion page for details.

Contact

Privacy questions: support@aegisdms.life