Privacy Policy
This Privacy Policy explains how BURSUsofts ("we", "us") handles your information when you use the BURSU Connection Manager desktop application ("the app") and the BURSUcloud service at bursucm.com ("the service").
1. Information we collect
- Account data. When you create a BURSUcloud account we store your email address, a securely hashed password, and optional profile fields (first name, last name, nickname).
- Google sign-in. If you choose "Continue with Google", we receive your verified email, basic profile and a Google account identifier to create or link your account. We never receive your Google password.
- Service data. Connection catalogs you sync to BURSUcloud are stored in an isolated PostgreSQL database. Stored secrets (passwords, SSH keys) are encrypted at rest.
- Technical data. Standard web server logs (IP address, timestamp, user agent) and a session cookie required to keep you signed in.
2. How we use it
- To create and operate your account and the service.
- To provision and connect your cloud database over our secure API.
- To secure the service and prevent abuse.
- To respond to support requests.
3. The desktop app and local data
Used in local mode, the app stores your connections and credentials only on your own computer (local SQLite, protected by a portable AES-256-GCM master password, or Windows DPAPI on Windows). That data never leaves your device unless you choose to sync it to BURSUcloud.
4. Sharing
We do not sell your data. We share information only with infrastructure providers needed to run the service, or where required by law.
5. Security
Passwords are hashed, stored secrets are encrypted, PostgreSQL is not exposed to the public internet, and access runs over our zero-knowledge API and HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.
6. Data retention & your rights
We keep account and service data while your account is active. You may request access, correction or deletion of your data, or delete your databases and account at any time.
7. Cookies
We use an essential session cookie to keep you signed in and a cookie that remembers your language. Site traffic is measured with Google Analytics.
8. Contact
Questions about this policy? Contact us at support [at] bursucm.com.