◆ Privacy Policy

Privacy Policy

Privacy insurance, not just security. What we don't see — we can't expose.
🛡️

Principle: What we don't see — we can't expose

NoData provides privacy insurance — not just security. System diagnosis runs in the customer's environment only. Encryption happens in the customer's code. Communication tools are end-to-end encrypted. We only see proofs (hashes) — never the data itself.
📋

Minimal Audit Log — proof, not data

NoData stores a minimal log for legal proof: session ID, timestamps, action types, proof hashes (SHA-256). Retention: 7 years (Israeli tax law + SOC 2 CC7.4). Hashes cannot be reversed to data.
●IP address hash (not the IP itself)
●Project name hash (not the name)
●Action count (79 fixes) — not what they are
●Terms consent with timestamp
🚫

What NoData NEVER stores

Under no circumstances — not even by court order — does NoData store:
●Customer source code
●Table names, fields, or schemas
●Scanned PII values or business data
●Scan report contents
●Credentials, encryption keys, passwords
●Message or file contents
●Raw IP addresses
🔐

End-to-End Encryption

Communication tools (chat, secure channel, rooms, report box) encrypt end-to-end with RSA-4096 + AES-256-GCM. The server sees only encrypted blobs — it cannot read content. Messages auto-delete (TTL). Only delivery proof (HMAC-SHA256) remains.
🔐

Encryption

End-to-end encryption with RSA-4096 + AES-256-GCM. The server sees only encrypted blobs — it cannot read any message content.
⏳

Data Retention

All messages auto-delete with TTL of 1–72 hours. View-once messages are deleted immediately after reading.
📦

What We Store

Only the technical minimum to operate the app:
●Device ID (random UUID)
●Public key
●Optional username hash
🚫

What We Never Store

This information never touches our servers:
●Message content
●Sender identity
●IP addresses
●Phone numbers — only HMAC-hardened hashes stored, irreversible even if breached
●Contacts, location, metadata
📧

Contact

For privacy questions or to report a potential vulnerability:
Last updated: February 2026
← Back to Home