Privacy Policy

1. Introduction

At kleak.dev, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our account management services.

2. Information We Collect

We collect the following types of information to provide and improve our services:

• Account information: your email address, name, and profile picture when provided.
• Authentication data: securely hashed passwords, two-factor authentication (TOTP) configuration, and session tokens.
• Usage data: login timestamps, IP addresses, and general interaction patterns to maintain security and improve our services.
• OAuth authorization data: records of third-party applications you have authorized and the scopes of access granted.

3. How We Use Your Information

We use your information to:

• Create and manage your account, including authentication and email verification.
• Provide security features such as two-factor authentication and session management.
• Process OAuth authorizations for third-party application access.
• Send essential communications such as email verification links and password reset instructions.
• Detect and prevent fraudulent or unauthorized access to your account.

4. Data Storage & Security

We implement industry-standard security measures to protect your data. Passwords are securely hashed and never stored in plain text. Sessions are managed with secure tokens and have a limited lifetime.

We use rate limiting and security headers to protect against common web attacks. All data is transmitted over encrypted HTTPS connections.

5. Third-Party Services (OAuth)

When you authorize a third-party application through OAuth, that application may receive access to certain account data based on the scopes you approve. We only share the specific data you consent to.

You can review and revoke third-party application access at any time from your account settings. We encourage you to review the privacy policies of any third-party applications you authorize.

6. Cookies & Sessions

We use session cookies to keep you logged in and maintain your preferences. These cookies are essential for the functioning of the platform and are not used for tracking or advertising purposes.

7. Data Retention

We retain your account data for as long as your account is active. Session data is automatically expired after 30 days of inactivity. If you delete your account, your personal data will be removed from our systems.

8. Your Rights

You have the right to:

• Access and update your personal information through your profile settings.
• Delete your account and associated data.
• Revoke access granted to third-party applications at any time.
• Request information about the data we hold about you.

9. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at contact@kleak.dev.