Data Processing

At Veault, we take your privacy and data protection extremely seriously. On this page, we explain in clear language what data we process, why we do so, and how we protect your information.

For full legal details, please refer to our privacy policy.

1. What data do we process?

We distinguish four types of data:

1.1. Data in your digital vault (Zero-Knowledge)

Most importantly: everything you enter into your personal Veault vault — such as notes, documents, or personal information — remains completely private. This data:

• Is encrypted locally on your device (client-side encryption).
• Is technically unreadable and impossible to decrypt for us as the provider.
• Is only sent to our servers in encrypted, unreadable form.

We have no access whatsoever to the contents of your vault.

1.2. Your Account Data

To manage your account, process your subscription, and provide support, we process:

• Identity data: First name, last name, and email address.
• Preferences: Language preference and market information.
• Subscription data: Your current status (Trial, Monthly, Yearly, Lifetime) and your billing history (processed via our partner Stripe).

1.3. Data of guide requesters

If you request our free guide via our website, we save your email address and first name to send you the guide. If you check the separate box to also receive our newsletter, we will also use this data to send you those emails. Without checking that box, you will only receive the guide.

1.4. Website Usage (Analytics & Tracking)

Here, we make a crucial distinction between privacy-friendly analytics and optional marketing tracking:

• By default (Privacy-friendly): We use Vemetric. This tool does not use cookies and collects no personal data. It only provides us with anonymous statistics (e.g. "how many people visited page X").
• Only with your consent (Opt-in): If you give us explicit consent via the cookie banner, we store a click ID (such as a GCLID) in your browser. These tools help us measure which ads lead to a sign-up or purchase. If you do not give consent, nothing is stored in your browser for this purpose and no tracking takes place.

2. Why do we process your data?

We process your data exclusively to:

• Deliver the Veault service (your account, your vault, your login).
• Process your subscription and payments.
• Secure our platform against abuse (e.g., via IP logs).
• Provide support if you email us.
• Anonymously improve our website (via Vemetric).
• Send you the free guide and, strictly upon your separate consent, our newsletter.
• Measure advertisement effectiveness (only if you give consent).

3. Who do we share data with?

We never sell your data to third parties. We only share data with these strictly necessary partners (sub-processors) to operate our service:

• Stripe: For securely processing your payment and subscription.
• Amazon Web Services (AWS): For securely hosting our servers and your encrypted data, and sending all our emails (such as login codes, invoice information, support, and, upon consent, marketing).
• Vercel: For hosting our marketing website.
• Neon: For the database where we store the contact details of visitors requesting the free guide.
• Vemetric: For anonymous, privacy-friendly analytics of our website traffic.

All of these partners process your data within the EU.

Only if you give explicit consent for marketing will data be shared with:

• Google (US): For ad analytics. Google independently determines how it further processes this data; this takes place under Google's own transfer safeguards (such as the EU-US Data Privacy Framework).

4. Your rights

You remain in control of your data. You always have the right to:

• Access the account data we hold about you.
• Modify or correct your data.
• Download your entire vault content (data portability).
• Withdraw your consent for marketing tracking or newsletters.
• Delete your account completely (right to erasure).
• Lodge a complaint with the supervisory authority (such as the Data Protection Authority).

Feel free to send us an email at privacy@veault.com if you wish to exercise your rights.

5. Retention periods

We do not retain data longer than necessary:

• Your Vault & Account: Your data is retained for as long as you have an active account (an active subscription or Lifetime access).
• Inactivity Policy: If your subscription expires (and you do not have Lifetime access), your account becomes 'inactive'. 30 days after becoming inactive, your account and all your vault data will be permanently and irrevocably deleted.
• Data of guide requesters: We store this until you unsubscribe, or for a maximum of 2 years after your last interaction if you do not unsubscribe earlier.
• Billing data: We are legally required to retain this for tax authorities (typically 7–10 years), even after your account has been deleted.
• Security logs: These (such as IP logs) are retained for a maximum of 90 days.

6. Security

• Your vault is encrypted locally on your device (client-side).
• We have no access to your data (zero-knowledge).
• Hosting takes place on highly secure servers within the European Union.

Questions?

Do you have questions about how we handle your data? Feel free to contact us via privacy@veault.com.