Privacy Policy

This Privacy Policy describes how ValoraVault LLC ("we," "us," or "our") collects, uses, and protects information when you use ValoraVault ("Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account information: When you create an account, we collect your email address and password (stored as a secure hash). You may optionally provide your name.

Payment information: Billing is handled by Stripe. We do not store your credit card number, expiration date, or CVV. Stripe's privacy policy governs how they handle your payment data.

Document content: Files you upload are stored in Supabase's encrypted cloud storage. Links you save are encrypted with AES-256 before storage. We do not read, index, or analyze the content of your documents.

Usage data: We collect basic usage information such as login timestamps and feature usage to operate and improve the Service. We do not use third-party advertising trackers.

2. How We Use Your Information

We use the information we collect solely to provide, operate, and improve the ValoraVault Service. Specifically, we use your information to authenticate your account, process payments, deliver features, and send transactional emails (such as confirmation and billing notices).

We do not sell, rent, or share your personal information or document content with third parties for marketing or advertising purposes.

3. Third-Party Services

ValoraVault uses the following third-party services to operate:

Supabase -- authentication and database storage. Your account data and document metadata are stored in Supabase's infrastructure.

Stripe -- payment processing. Stripe handles all billing and stores your payment method securely. ValoraVault never sees your full card details.

Resend -- transactional email delivery. We use Resend to send confirmation, billing, and notification emails.

Netlify -- hosting and serverless functions. ValoraVault is hosted on Netlify's infrastructure.

Each of these providers has their own privacy policies governing their use of data.

4. Data Security

We take reasonable technical measures to protect your information, including AES-256 encryption of stored links, SSL/TLS encryption in transit, and row-level security on all database tables so users can only access their own data.

No system is completely secure. You are responsible for keeping your account credentials confidential and for maintaining independent copies of important documents.

5. Data Retention

We retain your account data and documents for as long as your account is active. If you cancel your subscription, your data remains accessible through the end of your billing period.

To request deletion of your account and all associated data, contact us at team@valoravault.com. We will process deletion requests within 30 days.

6. Your Rights

You have the right to access, correct, or delete your personal information. To make a request, contact us at team@valoravault.com.

If you are located in the European Economic Area, you have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

7. Cookies

ValoraVault uses session storage and local storage in your browser to maintain your login state and subscription information. We do not use third-party advertising cookies or tracking pixels.

8. Children's Privacy

ValoraVault is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us at team@valoravault.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice within the Service at least 14 days before the changes take effect.

10. Contact

Questions about this Privacy Policy? Contact us at team@valoravault.com.

ValoraVault LLC  ·  Palm Harbor, Florida