What we collect
Account: name, work email, hashed password, organization name.
Workspace: vaults, secret names/types/permissions, members, roles, access requests, audit events. Secret values are encrypted — never in logs or URLs.
Technical: IP, browser, security events, and a session cookie to keep you signed in.
Billing: plan, interval, transaction ids, and card brand/last4 from Creem. We never store full card numbers.
sales@secrela.com