GreenAddress does not store customers’ keys. Rather, the keys are derived on demand from the mnemonics provided during the setup process. They are not even sent to the server. However, the only time the keys are stored is when the PIN login is enabled, and even then the keys are always strongly encrypted.