Privacy Policy

Vaultaire is a private ownership wallet: you record what you own, attach proof of purchase, and track warranties. This page explains what data that requires, why we collect it, and what you can do about it.

Account information. Your email address, display name, and any avatar you set, handled by our authentication provider (Supabase Auth). If you choose to sign in with Google, Google shares your name and email address with us for that purpose only — we don't access your Google contacts, files or any other Google data.

What you record. The assets, spaces, warranties, and documents you add — names, prices, purchase dates, serial numbers, receipts, invoices, and photos you upload. This is the core of the product: it exists to store this information for you, privately.

Payment information. If you subscribe to Premium, payment is handled entirely by Stripe. We never see or store your card number — we only receive confirmation that a subscription is active, and an internal reference id.

Preferences. Account-level choices — your notification settings and which guided tips you've already seen — are stored with your account so they follow you across devices. Your theme choice is kept in your browser, on your own device.

To run the product: show you what you've recorded, calculate documentation scores and warranty status, flag coverage that's about to expire, send the emails your account needs (sign-in links, confirmations, password resets), and enforce plan limits. We do not sell your data, and we do not use what you record for advertising.

Data lives in a Supabase project — a hosted Postgres database plus private file storage. Every table is protected by row-level security: only you (and anyone you explicitly invite into a shared vault) can read or write your rows. Uploaded files sit in a private bucket; viewing one requires a short-lived signed link generated on demand, never a public URL.

We rely on a small number of providers, each acting strictly on our behalf for the function listed, and none of them for advertising or analytics on your data:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing for Premium subscriptions.
• Render — hosting of the Vaultaire website and application.
• OVHcloud — delivery of account emails from our mailbox.
• Google — sign-in, only if you choose "Continue with Google".

Vaultaire does not use tracking or advertising cookies. Your sign-in session and theme choice are kept in your browser's local storage — private to your device, never sent to a third party, and cleared if you clear your browser's site data. If you install Vaultaire on your device, a small cache of the app's own code is kept so it opens faster; it contains none of your records.

You can review and edit everything you've recorded directly in the app. To request a full export or deletion of your account and its data, contact us at the address below — we aim to act on deletion requests within 30 days.

We keep your data for as long as your account is active. If you delete your account, your records and uploaded files are removed from active storage; backups are purged on our normal backup rotation schedule.

If this policy changes materially, we'll update the date above and, where required, let you know directly.

Questions about this policy or your data: contact@getvaultaire.com. See also our Legal Notice for who operates Vaultaire.