Privacy Policy

Last updated: 2026-08-09

1. Data Controller

The controller of your personal data is:
Take a Break Piotr Ogrodowicz
Dmosin 54, 95-061 Dmosin, Poland
VAT ID: PL7297228159
Email: contact@secretkeybox.com

2. Data we collect and why

We process the following categories of personal data:

• Contact data (email address) — to respond to inquiries and provide customer support. Legal basis: Art. 6(1)(b) or (f) GDPR.
• Onboarding & trial-reminder email (email address) — where you submit it through the form on our website and give your consent, we use it to send you the installation guide and reminders before your Secret Keybox trial ends. We use double opt-in (you confirm your subscription by clicking a link in a confirmation email). Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw consent at any time via the unsubscribe link in every email or by contacting us; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Transaction data — name, address, payment details — to fulfil a license purchase. Payments are processed by EasyTools (third-party payment provider). Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
• Technical data — IP address, browser type, pages visited — for analytics and security purposes. Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

3. Credentials stored in the App

The Secret Keybox application stores credentials, secrets, and related data entirely within the customer's own Salesforce organization, in encrypted form. We (the Seller) have no access to this data: we cannot read, export, decrypt, recover, or restore any credentials stored in the App, and we do not receive, process, or hold this data on our own systems. Encryption keys are generated within and held by the customer's Salesforce organization; if such a key or the customer's Salesforce data is lost, the affected credentials become permanently unrecoverable, including by us. Responsibility for this data, and for the administration and backup of the Salesforce organization, rests solely with the customer.

4. Retention periods

• Transaction data — for the period required by tax law (generally 5 years from the end of the fiscal year in which the invoice was issued).
• Onboarding & trial-reminder email — until you withdraw your consent or unsubscribe, after which your email address is removed from the list.
• Contact correspondence — up to 2 years from the last contact.
• Technical logs — up to 12 months.

5. Data sharing

We do not sell or share your data with third parties for marketing purposes. Data may be disclosed to:

• EasyTools — our payment processor, to the extent necessary to complete a transaction.
• Zenbox — our hosting provider, limited to server log data.
• Make.com — our automation platform, used to deliver installation links and related transactional messages, limited to the data necessary to send them (e.g. your email address).
• ActiveCampaign — our email platform, used to manage the onboarding/trial-reminder subscription and send those emails, limited to your email address and subscription status. Processing is governed by a Data Processing Agreement.
• Public authorities — only when required by applicable law.

6. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure ("right to be forgotten", Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at: contact@secretkeybox.com

7. Cookies

This website may use cookies for technical purposes (session management, security) and analytics. You can disable cookies in your browser settings, which may affect some site functionality.

8. International transfers

Some of the processors we use are based outside the European Economic Area — in particular ActiveCampaign (email platform) is based in the United States. Where personal data is transferred outside the EEA, the transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission, together with a Data Processing Agreement with the relevant provider.

9. Changes to this policy

We reserve the right to update this Privacy Policy. Material changes will be communicated by publishing an updated version on this page with a revised date.

10. Contact

For any privacy-related questions: contact@secretkeybox.com