Skip to content

Legal

Privacy policy

This policy applies to people and organisations who use Argoned from any country. Argoned is a brand of Switchcodes Ltd, United Kingdom.

Last updated:

A person beside a protected web page

1. Controller, processor, and contact

Argoned is a brand of Switchcodes Ltd (United Kingdom). For the managed website and vault, that company is the controller for account, billing, and support data, for customers in any country. If you operate a self-hosted copy for other people, you are the controller for that copy. Contact: team@argoned.com.

2. Scope of this notice

This notice covers personal data processed via the Argoned website, web app, API, support channels, and operational logs. Read it with the Terms of use and the Security page.

3. Data we process

  • Account identity data: email, optional display name, account status, timestamps, and password-hash state used for account authentication.
  • Session and security data: session-token references, CSRF-token references, IP/user-agent hashes, expiry/revocation timestamps, plus authentication and abuse events.
  • Vault service metadata: encrypted vault profile, item, and recovery-artifact metadata (ciphertext/wrap blobs, salts, IV/nonce, tags, versions, timestamps).
  • Audit and operational logs: security event metadata and infrastructure logs.
  • Support/communications and commercial data: tickets, emails, plan, subscription, invoices, and payment references.

4. Data we are designed not to process in plaintext

Argoned is designed so routine server operations do not require your vault unlock secret, raw unwrapped vault keys, or item plaintext. If you send secrets directly through support channels, those submissions can be processed as ordinary communications data.

5. Sources of personal data

  • Directly from you (registration, usage, support contact, billing details).
  • From your organisation administrators (workspace provisioning and account management).
  • Automatically from your device/browser and service infrastructure logs.
  • From payment and communications providers where relevant.

6. Purposes and legal bases (GDPR / UK GDPR)

  • Contract performance (Art. 6(1)(b)): account access, encrypted storage, synchronisation, support, billing delivery.
  • Legitimate interests (Art. 6(1)(f)): service integrity, abuse prevention, fraud detection, troubleshooting, product reliability, internal metrics.
  • Legal obligations (Art. 6(1)(c)): accounting, tax, lawful requests, mandatory security or incident obligations.
  • Consent (Art. 6(1)(a)): optional cookies/marketing where required.

7. Cookies and similar technologies

On this marketing website we store one necessary cookie, cc_cookie, for about six months so we can remember whether you allowed optional cookies. You can accept all, reject optional cookies, or change that choice later from Cookie settings in the footer. We do not use advertising cookies here. Analytics is off unless you allow it, and no analytics cookie is set today.

The vault at vault.argoned.com uses separate necessary cookies for sign-in and security. Those are required for the account session. Blocking them in the browser can stop sign-in. Optional analytics or marketing technologies are used only after consent where the law requires it.

8. Security and abuse monitoring

We process security logs to detect credential stuffing, scraping, token abuse, and other attacks. We may correlate IP, user-agent, and event telemetry to protect users and infrastructure. Security controls include session hardening, access controls, transport encryption, and service-level safeguards described on the Security page.

9. Data sharing and recipients

We may share data with:

  • Infrastructure, hosting, and storage providers.
  • Payment processors, invoicing, and communications providers.
  • Support and monitoring vendors acting under contract.
  • Law enforcement or regulators where legally required.
  • Corporate transaction counterparties (with confidentiality protections) during merger/sale processes.

10. International transfers

Switchcodes Ltd is established in the United Kingdom and offers Argoned worldwide. Hosting is on Amazon Web Services. If personal data is transferred outside your country, including outside the UK, the EEA, or Switzerland, we use a lawful safeguard such as an adequacy decision, Standard Contractual Clauses, or an equivalent mechanism. UK GDPR applies to our handling of personal data. Where the EU GDPR or another privacy law applies to you, those rights apply as well.

11. Retention and deletion

Data is retained only as needed for service provision, security, legal compliance, and disputes. Account/support data can be deleted or anonymised after closure according to policy. Some encrypted artifacts and logs may persist for limited backup/disaster-recovery windows before expiration.

Account-only recovery reset in the vault app can clear encrypted vault profile/item/recovery records and revoke sessions, while legal/financial records may be retained where required.

12. Data subject rights (GDPR / UK GDPR)

Depending on jurisdiction, you may request access, correction, deletion, restriction, objection, and portability.

We may need identity verification and may decline or limit requests that are unlawful, manifestly unfounded, excessive, or that would materially impact others' rights or security. We respond within legally required timelines.

13. US state privacy disclosures

Where US state privacy laws apply (including CCPA/CPRA), users may have rights to know, access, correct, delete, and appeal certain decisions. We do not sell personal information in the traditional broker sense.

14. Incident and breach handling

We maintain incident response procedures and will provide required notices of personal-data breaches as applicable law requires. Timing and detail of notifications may depend on law enforcement and technical containment constraints.

15. Automated decision-making

We do not generally use solely automated decisions that produce legal or similarly significant effects, except limited automated abuse/risk controls permitted by law.

16. Children and sensitive categories

Services are not intended for children below applicable digital-consent ages. Do not submit special-category or highly sensitive personal data unless explicitly required and lawfully supported by your Operator agreement.

17. Do Not Track and browser signals

Because there is no uniform standard for browser DNT signals, Services may not respond to all DNT headers.

18. Policy updates

We may update this notice to reflect legal, operational, or product changes. Material changes will be communicated by reasonable channels (for example in-app notice or email when appropriate).

19. Complaints and supervisory authorities

You may contact us first at team@argoned.com. Where applicable, you may also lodge a complaint with your local data protection authority.

20. Contact

Privacy questions and requests: team@argoned.com.

A shield in front of servers

Your agent needs a login. Send it sealed.

Create a free vault with sealed sharing for AI agents and people, encrypted in your browser. No card needed.

Create a free vault How security works

£0 · Free plan, no card needed · Encrypted in your browser