Know where your information goes.

Who is responsible and how to contact us

SECUREDECOMM LTD operates this website and handles product enquiries, support and licensing administration. Contact securedecom@gmail.com about privacy or data requests. Our business contact details are on the contact page.

For business records that a seller chooses to process in their own workspace, the seller determines the purpose and content of those records and remains responsible for its own customers’ information.

Information collected by this website

Website hosting and security services receive connection information such as IP address, requested page, browser information and request time to deliver the site, diagnose faults and prevent abuse. We do not add advertising or behavioural tracking scripts, and we do not collect payment details on this information-only site.

If you email us, we receive your email address, message and anything you choose to attach. We use that information to answer your enquiry, provide requested support and maintain necessary correspondence. Please do not send passwords, activation keys, Amazon tokens or customer records.

Customer sign-in uses your email and licence key to verify an active licence with our licensing service. The website does not store the licence key. It stores a hashed session token, licence identifier, email, name, plan and expiry for the customer guide; a short-lived hashed-email attempt counter limits repeated sign-in attempts. The browser receives an HttpOnly session cookie that expires after eight hours. Signing out revokes that session.

Before the private guide opens, you must authorize our Discord application for its identity-only permission. We receive your stable Discord user ID and current username, and store those with your licence and connection time so the owner can identify who to contact about checkout activity, security alerts and audit records. Discord does not verify your licence or replace your email and licence key. The website keeps a single-use, hashed OAuth state for up to ten minutes; it does not retain your Discord access or refresh token. An owner can reset the connection after an account-recovery request.

Desktop, licensing and device sync

The desktop stores imported operating records on your device. Licensing services separately process account contact details, licence status, device identifiers, verification activity and security records to administer access. Local storage does not make an insecure device safe; you control access to your device, exports and backups.

If you enable encrypted workspace sync, relay services carry encrypted workspace payloads and routing information. Membership, device and access metadata are distinct from the encrypted operating records. Enabling sync is not necessary to read this website.

Amazon information and authorisation

The public Amazon integration is subject to Amazon approval and is not currently accepting customer authorisations. When offered, a seller will authorise the application on Amazon. The connection service is designed to retain encrypted refresh tokens, seller and marketplace identifiers, and device/licence binding information. It does not ask for an Amazon password.

Authorised desktop devices use short-lived access tokens to retrieve permitted Amazon order, inventory, catalogue and financial information for the seller’s selected workflows. Operating records are processed locally; the authorisation service is separate from those imports. Tokens are sensitive credentials even when encrypted, and the authorisation server remains a security boundary.

Revoking a connection removes its current stored authorisation secret from the service. It does not instantly invalidate every access token already issued by Amazon, remove local records or erase historical backups. Remove the application in Seller Central for Amazon-side revocation and contact us about deletion of retained service records.

Purposes and legal bases

We use enquiry information to take steps you request before an agreement and, where appropriate, to perform an agreement. Our legitimate interests are operating a reliable website, answering business correspondence and preventing abuse. Legal obligations may require us to retain certain administrative records. We do not use this information for unrelated marketing without an appropriate basis, and an access enquiry does not subscribe you to a mailing list.

Service providers and sharing

The website is hosted through OpenAI Sites and Cloudflare. Contabo hosts the separate licensing and connection infrastructure. Google provides the current contact mailbox; Resend provides outbound security email. These providers process the information needed for their respective services. Support correspondence is not an instruction to upload your operating database.

Discord handles the authorization screen and returns the identity you approve. Its own privacy terms apply to your use of Discord; our application requests no server, message, or email permission.

Stripe is being prepared for future subscriptions, but checkout is disabled on this public site. No card number is collected by Secured OS here. We do not sell your information. We may disclose information where legally required or necessary to investigate misuse and protect users.

Infrastructure and email providers can process information outside the UK. Applicable provider agreements and transfer safeguards must cover that processing. Contact us for details relevant to your enquiry or service before providing sensitive information.

Retention, protection and deletion

We keep enquiries for as long as needed to respond, resolve follow-up issues and meet applicable record-keeping obligations. Licensing and security records are retained according to their administrative and security purpose; a deletion request is assessed separately from cancelling access. Website infrastructure logs follow the hosting providers’ retention controls.

Local records, exports and backups remain under the workspace operator’s control. Deleting a server-side connection does not delete those copies. Retained backups require separate expiry or deletion handling; we do not claim that a record is erased from every backup immediately.

Transport encryption, restricted operator access and protected credential storage are used where applicable to each service. No service is immune to compromise or outage. We do not promise that local-first storage or encryption eliminates all risk.

Your rights and complaints

Depending on the circumstances, you can request access, correction, erasure, restriction or portability of your personal information, and object to certain processing. Where consent is the basis, you may withdraw it. Contact us using the address above; we may need proportionate information to verify the request without asking for your passwords or keys.

You can also complain to the UK Information Commissioner’s Office. We update this notice when the product’s data handling changes, including before opening paid customer accounts or public Amazon authorisation.