Privacy policy

In short

KeyHole works without an account and without any VigilanceX server: your hosts, keys and sessions stay on your Mac. The app collects no personal data and embeds no analytics. The only outbound connections go to Apple (App Store), to the servers you administer yourself and, if you use a licence key, to our revocation list. The website sets no cookies.

Data controller

IT-SECURE Luxembourg S.à r.l. (VigilanceX and HostCitadel brands), 87, Route d'Esch, L-4450 Belvaux, Grand Duchy of Luxembourg, RCS Luxembourg B174255. Contact for any question about personal data: contact@vigilancex.io. Given the nature and volume of the processing, no data protection officer has been appointed.

This document applies to the KeyHole app for macOS (Mac App Store version and direct download version) and to the website keyhole.vigilancex.io. It is drawn up in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018.

Data processed by the app

Everything stays local. Hosts (names, addresses, ports, login identifiers, groups, icons, notes), preferences and usage history are saved in the app's data folder on your Mac. Passwords and passphrases are stored in the macOS Keychain, encrypted by the system, and only leave it to establish the connection you request. SSH private keys are never copied: the app reads the file you point it to.

No account, no sync, no telemetry. KeyHole does not require a user account, synchronises nothing to any online service and sends no usage statistics or automatic crash reports to IT-SECURE Luxembourg.

Logs. A technical log is written to ~/Library/Logs/KeyHole on your Mac. It may contain host names and user names, never passwords. It only leaves your Mac if you send it yourself (see "Support and problem reporting").

Session recordings. When you enable recording, the terminal transcript (Markdown) or the RDP session video is written to Documents/KeyHole records (direct download version) or Downloads/KeyHole records (Mac App Store version). These files may contain sensitive information from remote systems; you are solely responsible for them and they only leave your Mac if you share them.

Network connections made by the app

KeyHole only establishes the following connections:

• To your own servers (SSH, SFTP, RDP): the data exchanged travels directly between your Mac and the machines you have configured, encrypted by the respective protocols. IT-SECURE Luxembourg has no access to it.
• To Apple: verification of purchase entitlements (StoreKit) and update checks through the public App Store API, which receives the app identifier. These exchanges are governed by Apple's privacy policy.
• To vigilancex.io, only if a licence key is configured: download, at most once every twelve hours, of a signed revocation list containing opaque key identifiers. No personal data is sent; as with any web request, the IP address is visible to the server and appears in its technical logs (see "Website").

Purchases and subscriptions

The free version, KeyHole Pro subscriptions and the perpetual licence are sold by Apple through the Mac App Store. Apple handles payment, invoicing, renewal and cancellation; IT-SECURE Luxembourg receives neither banking data nor the buyer's identity, only aggregated sales data. The app reads your purchase status locally to enable the corresponding features.

Licence keys issued directly

For licences issued outside the App Store (businesses, resellers), the key contains the holder's name and e-mail address as well as an identifier. This data is used to identify the licence holder and to revoke the licence in case of abuse. It is kept by IT-SECURE Luxembourg for the duration of the licence, then for five years under accounting obligations. The published revocation list contains only key identifiers, with no personal data. Legal basis: performance of the contract.

Support and problem reporting

The app's "Report a problem" feature prepares an e-mail in your mail client; nothing is sent without your action. The message contains your description, optionally your e-mail address, the app and macOS versions and, if you chose to include it, a diagnostic file (log excerpt and any crash report) that may mention host names and user names. Check its content before sending.

These e-mails and the website contact form are used exclusively to reply to you and to fix the reported defects. They are kept for twelve months after the request is closed, then deleted. Legal basis: legitimate interest (support and product improvement) and, for customers, performance of the contract.

Website

The website keyhole.vigilancex.io sets no cookies and embeds no tracker, no external font and no audience measurement tool. The hosting provider (HostCitadel, a brand of IT-SECURE Luxembourg, infrastructure in France) keeps technical connection logs (IP address, requested page, timestamp, browser) for a maximum of twelve months, for security and abuse detection purposes. Legal basis: legitimate interest.

Retention periods

Recipients and transfers

The only recipients of data are Apple (purchases, App Store) and the website hosting provider, a brand of IT-SECURE Luxembourg, whose infrastructure is located in the European Union. No data is sold, rented or shared for advertising purposes. IT-SECURE Luxembourg makes no transfer outside the European Union; processing carried out by Apple is governed by Apple's own policy.

Your rights

You have the right to access, rectify, erase, restrict, object to and port the data concerning you, as well as the right to set directives on what happens to your data after your death. To exercise these rights, write to contact@vigilancex.io stating the purpose of your request; you will receive a reply within one month. For data stored only on your Mac, you can view and delete it directly.

If you believe your rights are not being respected, you may lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg, cnpd.public.lu, or with the supervisory authority of your country of residence.

Security

The app relies on macOS security mechanisms: encrypted Keychain, locking with Touch ID or password, sandbox for the App Store version, SSH host key verification and TLS fingerprint pinning for RDP servers. Communications with Apple and vigilancex.io are encrypted (TLS). No measure guarantees absolute security: keep your backups and secrets carefully.

Minors

KeyHole is a professional tool intended for administrators and developers; it is not aimed at persons under sixteen and does not knowingly collect any data about them.

Changes

This policy may be updated to reflect changes to the app or to regulations. The date of the last update appears at the top of the page; substantial changes are announced in the app's release notes.