Privacy Policy

Last updated: January 2026

1. Introduction

varsafe is operated by G Networks, registered in France under SIREN 753 647 585, located at 100 rue Vulfran Warme, 80000 Amiens, France ("we", "our", or "us").

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our secrets management platform and related services, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the French Data Protection Act (Loi Informatique et Libertés).

2. Data Controller

The data controller for your personal data is G Networks, 100 rue Vulfran Warme, 80000 Amiens, France. For any data protection inquiry, use our contact form and select "Privacy"

3. Information We Collect

Account Information

  • Email address
  • Name (optional)
  • Authentication credentials (securely hashed)
  • OAuth provider information (if using social login)

Usage Information

  • Access logs and audit trails
  • IP addresses
  • Browser and device information
  • Feature usage patterns

Secrets and Configuration

We store encrypted secrets that you provide. Your secret values are encrypted at rest using industry-standard encryption. We do not have access to your plaintext secret values.

4. Legal Basis for Processing (GDPR Art. 6)

We process your personal data based on the following legal grounds:

  • Contract performance (Art. 6(1)(b)) — To provide and operate the Service, manage your account, and deliver the features you use
  • Legitimate interests (Art. 6(1)(f)) — To improve the Service, detect and prevent security threats, and maintain audit logs
  • Legal obligation (Art. 6(1)(c)) — To comply with applicable laws and legal requests

5. How We Use Your Information

  • To provide and maintain our services
  • To authenticate your identity
  • To generate audit logs for compliance
  • To improve our platform and user experience
  • To communicate important service updates
  • To detect and prevent security threats

6. Data Security

We implement robust security measures to protect your data:

  • End-to-end encryption for secrets
  • Secure, encrypted connections (TLS 1.3)
  • Regular security audits and penetration testing
  • Access controls and authentication
  • Immutable audit logging

7. Data Hosting and Transfers

All data is stored and processed exclusively on servers located in the European Union (Germany). We do not transfer your personal data outside the European Economic Area. If this were to change in the future, we would implement appropriate safeguards in accordance with GDPR Chapter V.

8. Data Retention

We retain your data for as long as your account is active. Audit logs are retained for compliance purposes (typically 7 years). Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

9. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers who assist in operating our platform
  • Law enforcement when required by legal process
  • Other parties with your explicit consent

10. Your Rights (GDPR Art. 15-22)

Under the GDPR and French data protection law, you have the right to:

  • Access (Art. 15) — Obtain a copy of your personal data
  • Rectification (Art. 16) — Correct inaccurate or incomplete data
  • Erasure (Art. 17) — Request deletion of your account and data
  • Data portability (Art. 20) — Export your data in a structured, machine-readable format
  • Restriction (Art. 18) — Restrict processing in certain circumstances
  • Objection (Art. 21) — Object to processing based on legitimate interests

To exercise any of these rights, use our contact form and select "Privacy". We will respond within 30 days. If you believe your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr

11. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies for advertising purposes.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please use our contact form and select "Privacy"