Passbolt SARL, a private company organised under the laws of the Duchy of Luxembourg with registered office in 9 Avenue des Hauts-Fourneaux, L-4362 Esch-Sur-Alzette, Luxembourg, hereinafter referred to as the “Company” or “Passbolt”
And you (hereinafter referred to as the "User");
Whereas the parties have agreed as follows:
(a) Passbolt Solution: means the group of the copyrighted softwares which right to use, distribute and license is owned by Passbolt SARL.
(b) Passbolt Server: means the server component of the Passbolt Solution, consisting of a JSON API developped in PHP as available on the Github Passbolt account: https://www.github.com/passbolt/passbolt_api
(c) Passbolt Browser Extension: (hereinafter referred to as the "Extension") means the browser web extension component of the Passbolt Solution as available on Mozilla Addons website or Chrome Marketplace website.
(d) Service: the functionalities provided by the Passbolt Solution, including but not limited to login and logout, register, recover account, as well as create, update, delete and share passwords, groups, users, comments.
(e) Service Provider: the person, organization or legal entity responsible for the hosting the Passbolt Server.
(f) Personal Information: Any information that you provide about yourself while using the Passbolt Solution that could help someone else identify you as an individual entity. This may include information such as your name, location, IP address, system locale and preferences, picture, public key information, etc.
2. Data sent from the Extension
This extension is designed to work in collaboration with a Passbolt Server. You can select which Passbolt Server can receive data from the Extension by completing the setup for a given Passbolt Server. During the first step of the setup you will be explicitly adding the Passbolt Server url as a trusted domain.
This extension will send some of your personal information such as email address, first and last name, public OpenPGP keys and password related informations to the Passbolt Server only for the sole purpose of giving you access to the Service. When saving or updating passwords information, the password itself is sent in an encrypted OpenPGP message format.
The user passphrase or secret key is never sent to the Passbolt Server. The decrypted passwords are never sent to the Passbolt Server.
The Extension stores cookies in order to provide a persistent authentication mechanism with the Passbolt Server. In short, it is required to know if you are logged in or not on a given Passbolt Server.
4. Persistent data stored in the Extension
This Extension stores a OpenPGP keyring, including the user secret key and other users public keys. The Extension also store the related user account information, such as the visual security code, your user id and username.This data is stored using the chrome.storage functionality of the Extension with remote synchronization disabled.
The user passphrase is not stored in the persistent storage but may be stored in memory if you decide to use the “remember my passphrase” functionality. The decrypted passwords are not stored in the persistent storage but they may be stored in your clipboard if you decide to use this functionality.
5. Which websites can see if the Extension is installed
Any page on internet can learn about the presence of the plugin if the page contains the class “passbolt” in the html tag of the page. In this case the extension will include additional class “passboltplugin” in the html tag of the page. This information is required to provide relevant help messages to assist the users with registration, account recovery, or otherwise prompt them to install the required Extension.
7. Disclaimer of Warranty.
Passbolt is not liable to the User or Service Provider for any damages and/or losses (including an interruption of the business, loss of information, loss of profits, business reputation and other property damage) related to the use of Passbolt Solution.
THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
8. Limitation of Liability.
IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
10. Contact information