⬡

Privacy Policy

How VAULT protects and handles your data

Last Updated: April 5, 2026

🔒 Privacy First: Your financial data is yours. We minimize data collection, encrypt everything, and never sell your information to third parties. Most of your data stays in your browser's localStorage — not our servers.

1. Information We Collect

1.1 Account Information (Stored on Our Servers)

Data	Purpose	Storage
Email address	Authentication, account recovery	Railway Postgres (encrypted)
Name	Personalization	Railway Postgres (encrypted)
Password hash	Authentication	Railway Postgres (scrypt + salt)
Trial/payment status	Subscription management	Railway Postgres

1.2 Financial Data (Stored Locally in Your Browser)

Your sensitive financial information — account balances, transactions, assets, debts, and investment details — is stored in your browser's localStorage. This means:

✅ Your data never touches our servers
✅ You maintain full control
✅ Data persists across sessions
⚠️ Clearing browser data will delete your financial records (export regularly!)

1.3 AI Advisor Interactions

When you use the AI Advisor feature, your financial summary is sent to Anthropic's Claude API to generate personalized recommendations. We do not store these conversations. Anthropic's privacy policy applies to API usage.

2. How We Use Your Information

To provide and maintain the Service
To process payments and manage subscriptions
To send important account notifications
To improve our AI recommendations
To detect and prevent fraud or abuse

3. Data We Do NOT Collect

❌ Bank account credentials (we never ask for passwords)
❌ Social Security Numbers
❌ Full credit card numbers (handled by Stripe)
❌ Precise location data
❌ Browsing history outside our app
❌ Third-party advertising IDs

4. Third-Party Services

Service	Purpose	Data Shared
Stripe	Payment processing	Payment method (tokenized)
Anthropic (Claude)	AI financial advisor	Financial summary (anonymized)
Redfin	Property valuations	Property address only
Railway	Database hosting	Account info (encrypted)

5. Your Rights (GDPR/CCPA)

Depending on your location, you have the right to:

Access: Request a copy of your personal data
Correction: Update inaccurate information
Deletion: Delete your account and associated data
Portability: Export your data in a usable format
Opt-out: Stop receiving marketing communications

6. Data Security

256-bit SSL/TLS encryption for all data in transit
Passwords hashed with scrypt (computationally expensive)
Regular security audits and dependency updates
No plaintext storage of sensitive information

7. Cookies and Tracking

We use minimal cookies:

Essential cookies: Authentication session
Preference cookies: UI settings (if applicable)

We do not use tracking cookies for advertising.

8. Children's Privacy

VAULT is not intended for users under 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy. Significant changes will be notified via email or in-app notice.

10. Contact Us

Privacy-related questions:
Email: privacy@vaultwealthiq.com
Data Protection Officer: VAULT Legal Team