Privacy Policy
Who we are
VAULT is operated by PD. This policy describes how we collect, use, share and protect your personal information.
Categories of data
Account details, financial information you enter or import, uploaded documents, cookies and analytics, device signals and support communications.
Purposes
Deliver and improve the product, provide support, run billing (via Paddle), send transactional and (opt-in) marketing communications, and comply with law.
Payment processing (Paddle)
Paddle acts as our Merchant of Record. When you complete checkout, Paddle collects your name, billing address, card details and tax location directly — VAULT never sees your full card number, CVV or PIN. Paddle shares only masked card metadata (brand, last-4, expiry) and subscription lifecycle events with us.
Subprocessors
See /subprocessors for the up-to-date list. Paddle is our billing subprocessor; MongoDB Atlas hosts the database; Emergent LLM powers AI features.
Your rights
Access, correction, deletion, portability and objection rights are available from /privacy-data. See /regional-privacy for jurisdiction-specific disclosures (DPDP, GDPR, CCPA/CPRA).
Retention
See /data-retention for retention windows. Encrypted backups rotate over 30 days.
Contact
privacy@vaultbypd.com · Grievance escalation at /grievance.