Data Processing

At Veault, we take your privacy and data protection extremely seriously. On this page, we explain in clear terms what data we process, why we do so, and how we protect your information.

For full legal details, please refer to our privacy policy.

1 What data do we process?

We distinguish four types of data:

1.1 Data in your digital vault (Zero-Knowledge)

Most importantly: everything you enter into your personal Veault vault — such as notes, documents, or personal information — remains completely private. This data:

• Is encrypted locally on your device (client-side encryption).
• Cannot technically be read or decrypted by us as the provider.
• Is transmitted to our servers only in encrypted, unreadable form.

We have no access to the contents of your vault.

1.2 Your Account Details

To manage your account, process your subscription, and provide you with support, we process:

• Identity details: First name, last name, and email address.
• Preferences: Language preference and market information.
• Subscription details: Your current status (Trial, Monthly, Yearly, Lifetime) and your billing history (processed via our partner Stripe).

1.3 Data from guide requesters

Requesting our free guide via our website? We save your email address and first name to send you the guide. If you check the separate box to also receive our newsletter, we also use this data to send you those emails. Without checking that box, you will only receive the guide.

1.4 Verification documents (Veault Access)

If you appoint trusted contacts via Veault Access and choose the release policy based on death certificate verification, the trusted contact can upload a death certificate and an ID document when submitting an unlock request. We recommend redacting the social security/national identity number on the ID document beforehand. Our support team uses these documents exclusively to evaluate the request and deletes them immediately afterward — we do not store them.

1.5 Progress metadata of your vault

To display a progress indicator, our system tracks the percentage completed and last updated timestamp for each section of your vault (such as Passwords, Documents, and Messages). This is metadata about your vault, not the contents of the sections themselves — and unlike your vault contents, this metadata is visible to us.

1.6 Website usage (Analytics & Tracking)

Here we make a crucial distinction between privacy-friendly analytics and optional marketing tracking:

• By default (Privacy-friendly): We use Vemetric. This tool does not use cookies and collects no personal data. It only gives us anonymous statistics (e.g., "how many people visited page X").
• Only with your consent (Opt-in): If you explicitly give consent via the cookie banner, we store a click ID (such as a GCLID) in your browser. These tools help us measure which ads lead to a signup or purchase. If you do not give consent, nothing is stored in your browser for this purpose and no tracking takes place.

2 Why do we process your data?

We process your data solely to:

• Provide the Veault service (your account, your vault, your login).
• Process your subscription and payments.
• Secure our platform against abuse (e.g. via IP logs).
• Provide support when you email us.
• Show you a progress indicator for your vault.
• Anonymously improve our website (via Vemetric).
• Send you the free guide and, strictly with your separate consent, our newsletter.
• Evaluate an unlock request within the scope of Veault Access.
• Measure advertising effectiveness (only if you give consent).

3 Who do we share data with?

We never sell your data to third parties. We only share data with strictly necessary partners (subprocessors) to run our service:

• Stripe: For securely processing your payment and subscription.
• Amazon Web Services (AWS): For secure hosting of our servers and your encrypted data, and for sending all our emails (such as login codes, billing information, support, and, with consent, marketing).
• Vercel: For hosting our marketing website.
• Neon: For the database storing contact details of visitors who request the free guide.
• Vemetric: For anonymous, privacy-friendly analytics of our website traffic.

All these partners process your data within the EU.

Only if you explicitly consent to marketing, data is shared with:

• Google (US): For advertising analytics. Google determines how it further processes this data based on Google's own transfer safeguards (such as the EU-US Data Privacy Framework).

4 Your rights

You remain in control of your data. You always have the right to:

• Inspect what account data we hold about you.
• Modify or correct your data.
• Download your complete vault contents (data portability).
• Withdraw your consent for marketing tracking or newsletters.
• Completely delete your account (right to erasure).
• Lodge a complaint with the supervisory authority (such as the Data Protection Authority).

Feel free to email us at privacy@veault.com if you wish to exercise your rights.

5 Retention periods

We do not retain data longer than necessary:

• Your Vault & Account: Your data is retained for as long as you have an active account (an active subscription or Lifetime access).
• Inactivity Policy: If your subscription expires (and you do not have Lifetime), your account becomes 'inactive'. 30 days after becoming inactive, your account and all your vault data are permanently and irrevocably deleted.
• Data from guide requesters: We retain this until you unsubscribe, or for a maximum of 2 years after your last interaction if you do not unsubscribe earlier.
• Verification documents (Veault Access): We use a death certificate and ID document exclusively to evaluate an unlock request; we delete them immediately after evaluation and do not store them.
• Billing data: We are legally required to retain this for tax authorities (typically 7-10 years), even after your account is deleted.
• Security logs: These (such as IP logs) are stored for a maximum of 90 days.

6 Security

• Your vault is encrypted locally on your device (client-side).
• We have no access to your vault data (zero-knowledge).
• Hosting takes place on highly secure servers within the European Union.

Questions?

Have questions about how we handle your data? Feel free to contact us at privacy@veault.com.