Privacy Policy

We believe in minimal data collection. We collect only the information you voluntarily provide and the information strictly required to operate your Citadel account.

Content you store in Citadel belongs to you. Files are protected using Secured2's keyless, physics-based approach: data is shredded, transformed and distributed so that no readable copy sits in any single location, and no encryption key exists that could be stolen or compelled.

We do not mine, sell, profile or train public AI models on your stored content. Where you choose to build a private AI model inside Citadel, indexing and retrieval happen inside your own account boundary and results are scoped to the files you selected.

Our staff do not access your file content except where you explicitly request support and grant access, or where we are legally compelled to act.

We use the information you provide solely for legitimate business purposes:

We do NOT use your information to track your behavior, build marketing profiles, sell to third parties, or follow you across the internet.

Unlike most websites, we do not use tracking cookies, analytics cookies, or any other tracking technologies on our public site. Your browsing experience here is completely private.

Inside the Citadel application we use only essential technical storage required to keep you signed in and to remember basic preferences such as your view settings. These are never used for tracking, analytics, advertising or profile building.

We do not sell, rent, trade, or share your personal information with third parties for marketing purposes. We may only share information in very limited situations:

We do not work with analytics providers, advertising networks, or data brokers that would have access to your information.

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Retention periods may vary based on data type and legal obligations.

Files you delete are moved to Trash and can be restored by you. Once permanently deleted, the underlying stored fragments are removed and cannot be recovered by us. Security audit records are retained for a limited period to support investigation of suspicious activity.

Secured2 employs administrative, technical, and physical safeguards to protect your information, including:

However, no system can be guaranteed 100% secure. Users are encouraged to take precautions when transmitting personal data online and to protect their account credentials.

Depending on your location, you may have the following rights:

To exercise any of these rights, contact us at privacy@secured2.com. We may require identity verification before fulfilling your request.

If you are located outside the United States, your information may be transferred to and processed in the U.S. or other countries. Where your plan includes a specific storage region or sovereign deployment, your stored content remains in the location you selected. We implement appropriate safeguards, such as standard contractual clauses, to protect your data in compliance with applicable laws.

Our Site may contain links to external websites not operated by Secured2. We are not responsible for the privacy practices or content of those third parties. You should review their privacy policies independently.

Our Site and services are not intended for children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware of such data collection, we will delete it promptly.

We may revise this Privacy Policy periodically. Updates will be posted on this page with a new "Last updated" date. Continued use of the Site or service after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or our data handling practices, please contact us using the details below.