Data Processing

At Veault, we take your privacy and data protection very seriously. On this page, we explain in plain language what data we process, why we do it, and how we protect your information.

For full legal details, please refer to our privacy statement.

1. What data do we process?

We distinguish three types of data:

1.1. Data in your digital vault (Zero-Knowledge)

This is the most important: everything you input into your personal Veault vault — like notes, documents, or personal information — remains completely private. This data:

• Is encrypted locally on your device (client-side encryption).

• Is technically unreadable or indecipherable for us as the service provider.

• Is sent to our servers only in an encrypted, unreadable form.

  
  

We have absolutely no access to the contents of your vault.

1.2. Your Account Data

To manage your account, process your subscription, and support you, we process:

• Identity data: First name, last name, and email address.

• Preferences: Language preference and market information.

• Subscription data: Your current status (Trial, Monthly, Yearly, Lifetime) and your billing history (processed through our partner Stripe).

  
  

1.3. Website Use (Analytics & Tracking)

We make a crucial distinction between privacy-friendly analysis and optional marketing tracking:

• Standard (Privacy-friendly): We use Vemetric. This tool does not use cookies and does not collect personal data. It only provides us with anonymous statistics (e.g., "how many people visited page X").

• Only with your consent (Opt-in): If you explicitly give us permission through the cookie banner, we activate Google Tag Manager and the Meta API (Pixelflow). These tools help us measure which ads lead to a purchase.

2. Why do we process your data?

We process your data solely to:

• Deliver the Veault service (your account, your vault, your login).

• Process your subscription and payments.

• Secure our platform against misuse (e.g., via IP logs).

• Provide support to you if you email us.

• Anonymously improve our website (via Vemetric).

• Measure the effectiveness of ads (only if you consent).

3. With whom do we share data?

We never sell your data to third parties. We only share data with these strictly necessary partners (sub-processors) to make our service work:

• Stripe: For safely processing your payment and subscription.

• Brevo: For sending all our emails (like login codes and billing information).

• Amazon Web Services (AWS): For the secure hosting of our servers and your encrypted data, and sending support emails.

• Vemetric: For anonymous, privacy-friendly analysis of our website traffic.

  
  

All these partners process your data within the EU.

Only if you explicitly consent to marketing, data is shared with:

• Google (USA): For ad analysis.

• Meta (USA): For measuring ad conversions.

4. Your rights

You remain in control of your data. You always have the right to:

• See what account data we have about you.

• Change or correct your data.

• Download the entire contents of your vault (data portability).

• Withdraw your consent for marketing tracking or newsletters.

• Completely delete your account (right to erasure).

• File a complaint with the supervisory authority (such as the Data Protection Authority).

  
  

Feel free to email us at privacy@veault.com if you want to exercise your rights.

5. Retention periods

We do not keep data longer than necessary:

• Your Vault & Account: Your data is stored as long as you have an active account (a current subscription or Lifetime access).

• Inactivity Policy: If your subscription expires (and you do not have Lifetime), your account becomes 'inactive'. 30 days after becoming inactive, your account and all your vault data are permanently and irrecoverably deleted.

• Billing data: We are legally obliged to keep these for the tax authorities (usually 7-10 years), even after your account is deleted.

• Security logs: These (like IP logs) are retained for a maximum of 90 days.

6. Security

• Your vault is encrypted locally on your device (client-side).

• We have no access to your data (zero-knowledge).

• Hosting takes place on highly secured servers within the European Union.

Questions?

Do you have questions about how we handle your data? Please feel free to contact us at privacy@veault.com.