Privacy Policy

Effective Date: October 2026 | Operator: Blue Horizon Traders, Mumbai, India

            Core Privacy Pledge: We do not sell your personal information. We cannot view, access, decrypt, or transfer your vault files or encryption keys under any circumstances. All encryption occurs strictly on-device.
        

1. Who We Are

This Privacy Policy governs the CoreSeal application, website, and licensing system operated by Blue Horizon Traders, located at CRESCENZO BUILDING, OPP MCA GROUND, BANDRA KURLA COMPLEX, G-BLOCK, BANDRA (EAST), MUMBAI, 400051, INDIA.

2. Data We Do NOT Collect

We adhere to strict zero-knowledge principles:

Vault Contents: Photos, videos, documents, notes, and password records stored within CoreSeal never leave your physical device.
Encryption Keys & Passphrases: Your PINs, patterns, calculator unlock codes, decoy credentials, and master cryptographic keys are derived locally using PBKDF2/Argon2id and are never transmitted to our servers or third parties.
Biometric Data: Biometric prompts use standard Android BiometricPrompt APIs; raw biometric templates never leave the hardware Secure Element/Keystore.

3. Data We Collect for Licensing & Payments

To deliver licensed Pro features, combat software piracy, and comply with financial accounting laws, we collect and process:

Customer Email Address: Used to issue receipts, send critical license credentials, and assist in account inquiries.
Hardware ID / Machine Fingerprint: A cryptographic hash generated by your device hardware to bind your Pro license and prevent unauthorized license cloning.
Payment & Transaction Records: Gateway order numbers, transaction amounts, currency, timestamp, and payment references (e.g. UPI UTR numbers or Stripe/PayPal payment identifiers). We do not store raw credit card numbers.
Server Telemetry: Standard web server access logs (IP address, user-agent) retained temporarily for security auditing, DDoS mitigation, and fraud defense.

4. Change of Control Clause

In the event that Blue Horizon Traders undergoes a business transition, such as a merger, corporate acquisition by another company, restructuring, bankruptcy, or sale of all or a portion of its assets, customer licensing records (specifically email address, Hardware ID binding, and purchase receipts) may be among the assets transferred, to the extent permitted by applicable law. For the avoidance of doubt, private vault contents and encryption keys cannot be transferred as they are never in our custody or possession.

5. Data Retention & Security Safeguards

Licensing and financial records are retained for as long as necessary to administer active software entitlements and meet mandatory Indian tax and statutory compliance requirements. All administrative connections utilize HTTPS, rate limiting, and salted password hashing.

6. Contact Regarding Privacy

If you have questions or inquiries regarding our privacy practices, contact our Data Governance Officer at privacy@codeblux.com or write to Blue Horizon Traders at our Mumbai registered address.