What we store
Your authenticator accounts (service name, account name, secret key and settings) are stored only in your browser's local storage, encrypted with a key derived from your passphrase. We cannot read them.
What we never collect
We do not collect your secret keys, generated codes, passphrases, or passwords for any other service. Codes are never transmitted or forwarded.
Camera
The camera is used only while you scan a QR code, and images are processed on your device. Nothing is recorded or uploaded.
Vertexz Mail
When you generate a mailbox we store its address, a one-way scrambled version (hash) of its password and recovery code, and the emails it receives as plain text. We can't see your password. Emails are kept until you delete them or delete the mailbox, which removes everything immediately. Images, scripts and trackers in emails never load. Our database provider keeps routine backups that roll off on their schedule. There's no recovery email: if you lose both your password and recovery code, the mailbox can't be recovered. Don't use it for banking or sensitive accounts.
Email safety analysis
When you submit email text to Email Safety Check, that text is sent through Lovable AI for processing. Remove passwords, verification codes and sensitive personal details before submitting. Vertexz does not save this text or the analysis in its database or browser storage. Lovable AI may retain request data in operational logs under its applicable policies. This optional check never accesses your authenticator vault, secrets or generated codes. AI analysis can be incorrect and does not verify senders, links or attachments.
Tracking
We do not use advertising trackers. Our hosting provider may keep standard technical logs (such as IP address and pages requested) needed to serve the website.
External links
Links to WhatsApp and the Vertexz Store open those services, which have their own privacy policies.
Contact
Questions? Message Vertexz Support on WhatsApp at +92 326 7651025.