Jadaptive Privacy Policy — Password Express

1. Core Philosophy: Absolute Data Sovereignty

Password Express is designed as an on-premise virtual appliance. This means the software runs entirely within your network boundary. Your Active Directory, Entra ID, Google Workspace database, user credentials, and security configurations are stored locally on your own infrastructure. We do not have access to, nor do we ever collect, your users' passwords, directory structures, usernames, or security responses.

2. Information We Collect

To run our licensing infrastructure, process transactions, and improve the product, we collect specific, limited information across three contexts:

A. Website Downloads & Initial Access

No Gatekeeping: We do not ask for or collect your email address, name, or company info to download the Password Express Community Edition (CE) appliance. The download is open, transparent, and direct.

B. Appliance Registration & Daily Licensing

When you deploy the Password Express appliance, it establishes a secure outbound connection to Jadaptive's licensing server to sync license state. During this process, the following information is securely transmitted:

• Registration Email: The email address provided by the administrator when setting up and registering the appliance.

Appliance Metadata (Telemetry): We collect high-level, non-identifying operational statistics:

• The total number of active users managed by the appliance.
• The type of directory source database connected (e.g., Local DB, Active Directory, Microsoft Entra ID, or Google Workspace).
• The current version number of the appliance.
• Licensing Status: A cryptographic license ID token.

C. Commercial Transactions & Purchases

If you purchase Professional Licenses, Enterprise subscriptions, support add-ons, or SMS notification credits, we collect:

• Contact & Billing Details: Your name, work email address, company name, phone number, and physical billing/shipping address.
• Payment Processing: Payment details are processed securely by our third-party payment processors. Jadaptive does not store your raw credit card data.

3. What We Do NOT Collect

We believe in strict security boundaries. The Password Express appliance never returns any of the following data to Jadaptive's servers:

• No Passwords or Hashes: We never see, intercept, or store active or old passwords, password hashes, or security credentials.
• No Identity Lists: We do not collect lists of your employees' names, usernames, email addresses, security questions, or phone numbers.
• No Network Logs: We do not collect traffic logs, local IP maps, or connection histories from your internal networks.

4. How We Use the Collected Information

We use the limited data we collect solely for the following purposes:

• License Validation: To verify that your appliance has a valid, active license.
• Product Improvement: To understand how users deploy the appliance and identify areas for improvement.
• Customer Support: To respond to your inquiries and provide technical assistance.
• Security & Fraud Prevention: To detect and prevent unauthorized use of our software.

5. Data Retention

We retain your personal information only for as long as necessary to provide you with services and as needed to comply with our legal obligations. Appliance telemetry data is retained in aggregate, anonymized form for up to 24 months.

6. Your Rights

Under applicable data protection laws (including GDPR and UK Data Protection Act 2018), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate personal data.
• Request deletion of your personal data.
• Object to processing of your personal data.
• Request restriction of processing.
• Request transfer of your personal data.

To exercise any of these rights, please contact us at privacy@jadaptive.com.

7. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Jadaptive Limited
• Email: privacy@jadaptive.com
• Website: jadaptive.com