Privacy Policy

Controller: VaultReader — Sole Trader (UK). Address: Flat A, 2A Russell Street, Gloucester, GL1 1NE, United Kingdom.

1. Data We Process

• Account data: name, email, password hash.
• Usage data: device info, IP address, pages viewed, session metadata.
• Billing data: transaction identifiers from payment processors (no full card data stored).
• Publisher content metadata (titles, analytics).

2. How We Use Data

• Provide and secure the Service (authentication, fraud prevention, license enforcement).
• Improve product and support customers.
• Comply with legal obligations.

3. Legal Bases (GDPR)

• Contract performance (account provisioning, content access).
• Legitimate interests (security, analytics, product improvement).
• Consent (cookies/marketing where required).
• Legal obligation (tax, accounting).

4. Cookies and Tracking

We use essential cookies and, with your consent, analytics cookies. See our Cookie Policy. You can manage preferences via the cookie banner.

5. Data Sharing

We share personal data with service providers acting on our behalf (e.g., hosting, analytics, payments) under contracts that protect your information. Payments are processed by Stripe (UK/EU as applicable). We do not store full payment card data.

6. International Transfers

Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

7. Data Retention

We retain personal data only as long as necessary for the purposes above, then delete or anonymize it.

8. Your Rights

• Access, rectification, deletion, and portability.
• Object or restrict processing.
• Withdraw consent at any time (for consent-based processing).
• Lodge a complaint with a supervisory authority.

9. CCPA Notice (California)

We do not sell or share personal information for cross-context behavioral advertising. You have rights to know, delete, correct, and opt-out where applicable.

10. Security

We use encryption, access controls, and monitoring. No method is 100% secure.

11. Children

Our Service is not directed to children under 13 (or the age defined by local law). We do not knowingly collect such data.

12. Data Requests

If you wish to exercise your data protection rights (access, deletion, correction, portability, or objection), please email privacy@vaultreader.app with the subject line “Data Request” and include:

• Your account email address
• The specific right you wish to exercise
• Any relevant context to help us locate your data

We will verify your identity and respond in accordance with applicable law.

13. Contact

Data protection inquiries: privacy@vaultreader.app. Legal inquiries: legal@vaultreader.app.

14. Changes

We may update this policy and will post the revised version with a new date.