Effective May 8, 2026

Privacy Policy

FortNox is built so Apex Radius Labs cannot read your vault contents. This policy explains what account, billing, and product data we do and do not process.

Vault data

Your passwords, notes, cards, recovery material, and item fields are encrypted on your device before sync. We do not receive your master password or plaintext vault contents.

If sync is enabled, our services store encrypted vault payloads and non-secret metadata needed to authenticate, route, and synchronize your account.

Account and billing data

We process your email address, account identifiers, subscription status, plan, device labels, verification status, and timestamps needed to operate the service.

Payments are processed by Stripe. We do not store full payment card numbers on FortNox systems.

Diagnostics and support

We may process security logs, sync errors, crash diagnostics, support messages, and abuse-prevention signals. Do not send plaintext secrets in support requests.

Retention and deletion

We retain account and billing records as needed to operate the service, meet legal obligations, prevent abuse, and resolve disputes. You can request account deletion at [email protected].

Contact

Apex Radius Labs operates FortNox from Calgary, Alberta. Privacy requests can be sent to [email protected].