Privacy Policy

Last updated: January 22, 2026

1. Introduction

Sundy Data Labs ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use the Sundy encrypted storage application ("Service").

We are a company registered in Indonesia, operating globally. By using Sundy, you agree to the collection and use of information in accordance with this policy.

2. Information We Cannot Access

Sundy is designed so that we have zero knowledge of your encrypted data:

• Your Files: All encryption happens locally on your device. We never receive, transmit, or have access to your encrypted files.
• Your Passwords: Passwords are used locally to derive encryption keys. They are never transmitted to us.
• Your Encryption Keys: Keys are generated and stored only on your device.
• Content of Your Vaults: We have no technical capability to decrypt or access your vault contents.

3. Information We Collect

3.1 License Activation Data

When you purchase and activate a license, we collect:

• Machine ID: A hashed identifier derived from your hardware (used solely to bind your license to your device)
• Purchase Information: Email address and payment details processed by our payment provider

We do not link Machine IDs to personal information after license activation.

3.2 Website Analytics

Our website (sundy.io) may use privacy-respecting analytics to understand general traffic patterns. We do not use cookies for tracking or advertising purposes.

3.3 Support Communications

If you contact us for support, we retain your communication (email address and message content) to provide assistance and improve our service.

4. How We Use Information

The limited information we collect is used exclusively to:

• Validate and provide software licenses
• Process purchases and issue refunds
• Provide customer support
• Improve our software and documentation
• Comply with legal obligations

5. Data Storage and Security

• License data is stored securely with encryption at rest
• We use industry-standard security practices to protect our systems
• Payment processing is handled by PCI-compliant third-party providers
• We retain license records for the duration of your license validity

6. Third-Party Services

We use the following third-party services:

• Payment Processors: To handle transactions securely (e.g., Stripe, PayPal). These providers have their own privacy policies.
• Email Services: To send purchase confirmations and support responses.

We do not sell, trade, or transfer your information to other parties.

7. Your Rights

You have the right to:

• Access: Request what data we have about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Portability: Receive your data in a standard format
• Objection: Object to certain data processing activities

To exercise these rights, contact us at privacy@sundy.io.

8. International Data Transfers

We are based in Indonesia and may process data in other countries. We ensure appropriate safeguards are in place for any international data transfers.

9. Children's Privacy

Sundy is not intended for users under 16 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting a notice on our website. Your continued use of Sundy after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@sundy.io
• Company: Sundy Data Labs
• Location: Indonesia