Privacy Policy

Data Hash Secure builds Hash List, a desktop application that hashes a column of contact data on your own computer. This policy explains what we do — and do not — collect. Our core promise is simple: your spreadsheets and the contact data inside them never leave your device.

1. Data processed locally and never uploaded

When you use Hash List to hash a file, the entire operation happens on your computer. We never receive, store, or transmit:

• Your imported spreadsheets (CSV or Excel files)
• The original values in any column (emails, phone numbers, or other identifiers)
• The hashed output values
• Filenames, column names, or row counts of the files you process

This information is never included in our logs and never included in crash reports. Temporary working data is cleared when a job finishes or when you close the application.

2. Information we do collect

To provide accounts, subscriptions, and licensing, we collect a limited amount of account information:

• Account details — the email address and password you use to create an account. Passwords are stored in hashed form by our authentication provider.
• Subscription records — your subscription status, billing period, and the customer and subscription identifiers issued by our payment processor. We do not store your full card number.
• Device and license data — a randomly generated application identifier for each device, the operating system, the app version, and activation and validation timestamps. We do not use invasive hardware fingerprinting.
• License events — a record of activations, validations, and device revocations used to enforce the two-device limit and offline grace period.

3. How we use this information

• To authenticate you and keep your account secure
• To manage your annual subscription and billing
• To validate your license and enforce the device limit
• To deliver signed application updates
• To respond to support requests

We do not sell your personal information, and we do not use it for advertising.

4. Service providers

We rely on a small number of trusted providers to run the service:

• Supabase — authentication, database, and backend functions.
• Stripe — payment processing and subscription billing. Stripe handles your card details directly under its own privacy policy.
• Resend — delivery of transactional emails such as confirmation and password-reset messages.

These providers process data only to perform services for us and are bound by their own privacy and security commitments.

5. Network connections

The Hash List desktop app connects to our servers only for authentication, subscription validation, license management, version checks, and downloading signed updates. The data-processing engine does not require an internet connection.

6. Data retention

We retain your account, subscription, device, and license records for as long as your account exists, and as needed to meet legal and accounting obligations. You may request deletion of your account by contacting us.

7. Your choices

• You can update your password from the account screen.
• You can cancel your subscription at any time through the billing portal.
• You can revoke a device from your account to free up a license slot.
• You can request access to, correction of, or deletion of your account data by emailing us.

8. Security

We use industry-standard measures to protect account data in transit and at rest. No method of transmission or storage is completely secure, but because your contact data is never uploaded, the most sensitive information stays under your control at all times.

9. Children

Hash List is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

11. Contact

Questions about this policy? Email info@datahashsecure.com.