Keeper

Vault contents are end-to-end encrypted and structurally inaccessible to Keeper — including under subpoena — and payment cards are tokenised rather than stored; but Keeper collects device identifiers, IP addresses, system performance data, and usage analytics, uses cookies and tracking technologies for advertising, and applies legitimate interest as a legal basis for 'developing and training new technology'.

Keeper explicitly does not sell or share personal information under CCPA definitions; the zero-knowledge architecture means vault contents cannot be disclosed even under compulsion; but it is a US company on AWS subject to US legal process, enterprise account admins can access employees' usage and interaction data, and data is processed by vendors under confidentiality agreements that are listed rather than named.

Vault data can be exported at any time but cannot be decrypted by Keeper on request; account deletion cancels all subscriptions and removes data; material policy changes trigger email or in-app notification; but data retention is vaguely defined as 'as long as an account is active or as needed to provide services', no specific post-cancellation window is stated, and rights requests may take 45 days under CCPA.