Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information. When you register, we collect your name, email address, and a hashed password. You may optionally provide additional profile details.
• Order and payment information. When you make a purchase, payments are processed by our payment processor, Stripe. We receive limited transaction details (such as order amount, status, and the last four digits and card brand) but we do not store full payment card numbers on our servers.
• Usage and analytics data. We collect information about how you interact with the Service, such as pages viewed, assets previewed, device and browser type, IP address, and referring URLs.
• Cookies and similar technologies. We and our providers use cookies and similar technologies as described in our Cookie Policy.

2. How We Use Information

We use personal information to:

• Provide, operate, and maintain the Service and deliver purchased assets;
• Process payments, prevent fraud, and enforce our Terms;
• Communicate with you about orders, support requests, and account matters;
• Understand and improve the Service through analytics;
• Comply with legal obligations and protect our rights and those of our users.

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases to process your personal data:

• Performance of a contract — to provide the Service, fulfil orders, and deliver assets you purchase;
• Legitimate interests — to secure the Service, prevent fraud, and improve our offerings, balanced against your rights;
• Consent — for non-essential cookies and certain marketing communications, which you may withdraw at any time;
• Legal obligation — to comply with applicable laws, tax requirements, and lawful requests.

4. How We Share Information

We do not sell your personal information. We share it only as follows:

• Payment processor. Stripe processes your payment data to complete transactions.
• Analytics and infrastructure providers. Service providers that help us host, operate, and analyze the Service, under contractual confidentiality obligations.
• Legal and compliance. Where required to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and property of Vaultforge and others.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Cookies

We use cookies and similar technologies to operate the Service, remember your preferences, and measure usage. For details about the categories of cookies we use and how to manage them, see our Cookie Policy.

6. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with our legal and tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. Order and tax records may be retained for longer periods where required by law.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or misuse — including encryption in transit and reliance on PCI-compliant payment infrastructure. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. International Transfers

We are based in the United States and may process and store information in the United States and other countries. Where we transfer personal data from the EEA, UK, or other regions, we rely on appropriate safeguards, such as Standard Contractual Clauses, where required by law.

9. Your Rights

Depending on where you live, you may have rights regarding your personal information. Under the GDPR, these include the rights to access, rectify, erase, restrict, and port your data, and to object to certain processing. Under the California Consumer Privacy Act (CCPA), these include the rights to know, delete, correct, and opt out of the sale or sharing of personal information — and we do not sell your data. To exercise any of these rights, contact us at support@vaultforge.com. We will respond within the timeframes required by applicable law, and you may appeal or lodge a complaint with your local supervisory authority.

10. Children’s Privacy

The Service is not directed to children under the age of 18 (or the applicable age of majority), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@vaultforge.com or via our Contact page.