ServiceFlx Password Manager: Privacy Policy

Effective date: 09-Oct-2026

This policy covers the ServiceFlx Password Manager browser extension ("the extension"), published by Moonwhite Technologies Pvt Ltd ("ServiceFlx", "we", "us"). The extension fills, and signs in with, the logins saved in your organization's ServiceFlx Password Vault.

You use the extension as a member of an organization that uses ServiceFlx. Your organization controls its ServiceFlx account, including the vault and its access history. The ServiceFlx service itself is covered by your organization's agreement with us and by the ServiceFlx privacy policy.

What the extension handles, and why

Your ServiceFlx account. When you sign in, the extension receives your name, email address, organization name and your organization's ServiceFlx web address. It shows them in the extension and uses the web address to open your vault.

Sign-in tokens. ServiceFlx issues the extension its own sign-in session. It appears in your list of signed-in devices and you can end it there. The tokens are kept in the browser's memory only, never on disk. They are deleted when you sign out, when you sign out of the ServiceFlx web app, or when the browser closes.

Your passwords. The vault is end-to-end encrypted.

• When you fill a login, ServiceFlx sends that one entry to the extension, still encrypted.
• The extension decrypts it in your browser with keys unlocked by your master password or passkey, puts it into the login form, and keeps no copy.
• Your master password, your keys and your decrypted passwords are never sent to us.
• Unlocked keys stay in the browser's memory until the extension locks: after the idle time you choose, when your computer locks, when you sign out, or when the browser closes.

The websites you sign in to. The extension looks for login forms on the pages you open. It examines form fields only, in your browser.

• When it finds a login form while you are signed in, it sends that page's origin to ServiceFlx to find the logins saved for it. The origin is the scheme, host and port, for example https://portal.example.com, not the full address.
• When you fill a login, ServiceFlx records it in your vault's access history for your organization's audit trail. The record holds the website's origin, the time, your IP address, your browser and device type, and a random identifier for this browser.
• The extension sends nothing about pages without a login form, and never sends a page's content.

Your settings. Your auto-lock time, whether the icon appears in login fields, whether the extension signs in automatically, and a random identifier for this browser. They are stored in your browser's local extension storage.

What we don't do

• We don't sell or rent your data, and we don't share it with third parties, except the service providers that host ServiceFlx for us under contract.
• We don't use it for advertising, profiling, analytics or tracking, or for any purpose other than filling and signing in with your vault logins and keeping your organization's audit trail.
• We don't use it to determine creditworthiness or for lending.
• The extension contains no third-party analytics, ads or remote code.

Where the data goes

Only to the ServiceFlx service: flxapi.prod.serviceflx.com (the vault) and sso.prod.serviceflx.com (sign-in), over HTTPS. Your organization's administrators can see the vault's access history, and they set its policies: whether browser autofill is allowed, whether two-factor authentication is required, and the longest auto-lock time.

How long it's kept

• In the extension: session data until you sign out, the extension locks or the browser closes; settings until you remove the extension.
• In ServiceFlx: vault data and access history for as long as your organization keeps them under its agreement with ServiceFlx.

Your choices

• Sign out of the extension at any time, or end its session from your device list in ServiceFlx.
• Turn off Sign in automatically, or the icon in login fields, in the extension's Settings.
• Limit the extension to the sites you choose in Chrome's extension settings (Site access).
• Remove the extension to delete everything it stored in your browser.
• For data held in ServiceFlx, such as your vault or its access history, contact your organization's administrator, or us at the address below.

Children

The extension is meant for work use within organizations. It is not directed at children.

Changes

If this policy changes, we update this page and its effective date. Significant changes are announced in the extension's store listing.

Contact

Moonwhite Technologies Pvt Ltd, 3rd Floor, Triumph Tower, Seaport - Airport Rd, Judgemukku, Thrikkakara, Kakkanad, Kochi, Kerala 682021.. Email: support@serviceflx.com.