Privacy Policy

Your privacy is important to us. This Privacy Policy explains how inweso Ltd liab. Co ("we," "us," or "our") collects, uses, shares, and protects your information when you use our Vaultrice service ("Service").

1. Data Controller

The data controller responsible for your information is:

inweso Ltd liab. Co Seezelgstrasse 57 8595 Altnau Switzerland CHE-412.131.272

For any privacy-related questions, you can contact us at privacy@vaultrice.com.

2. Our Commitment to Data Protection

Along with our business and internal computer systems, our Service is designed to comply with the following national and international legislation with regards to data protection and user privacy:

• Swiss Federal Act on Data Protection (FADP)
• EU General Data Protection Regulation (GDPR)
• UK Data Protection Act 2018 (UK GDPR)
• California Consumer Privacy Act of 2018 (CCPA)
• Australian Privacy Act 1988 (APA)

Our aim is to ensure all our users' data is handled with the utmost care and in accordance with these high standards.

3. Information We Collect

We collect information in the following ways:

• Information You Provide to Us:

  • Account Information: When you register for an account, we collect information such as your username, email address, first name, and last name. This information is encrypted separately on 2 different layers. Your password is automatically hashed and salted.
  • Billing Information: When you subscribe to a paid plan, our payment processor, Stripe, collects your payment information. We do not store your full credit card details on our servers.
  • Communications: When you contact us for support or other inquiries, we may keep a record of your communication.

• Information We Collect Automatically:

  • Usage Data: We may collect information about how you use the Service, such as API requests, feature usage, and other interaction data.
  • Server Logs and IP Addresses: When you access our Service (including our website, web app, and API), our servers, managed by our infrastructure provider Cloudflare, may automatically record information that your browser or client sends. This log data may include your IP address, browser type, operating system, the referring web page, and timestamps. The infrastructure provider uses this data to secure the services, prevent abuse, monitor performance, and diagnose technical issues.
  • Website Analytics: When you visit our website (vaultrice.com), we use Google Analytics to collect standard internet log information and details of visitor behavior patterns. This helps us improve our website and marketing.
  • Cookies: We use necessary cookies to operate and secure our Service. Our public website may use cookies for analytics and marketing purposes.

• Data You Store in the Service:

  • You are the controller of the data you store within Vaultrice objects. We act as a data processor for this content and only process it according to your instructions. Our responsibilities as a processor are outlined in our Data Processing Addendum (DPA).
  • If you enable End-to-End Encryption (E2EE), the data you store is encrypted on your client device, and we have no ability to access the plaintext content.

4. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: To create your account, provide our services, and manage your subscription.
• For Billing and Account Management: To process payments, send invoices, and manage your account.
• To Improve the Service: To understand how our users interact with the Service, diagnose technical issues, and improve our offerings.
• For Security: To protect the security and integrity of our Service, prevent fraud, and enforce our Terms of Service.
• To Communicate with You: To send you important service-related notices (e.g., security alerts, billing notifications) and to respond to your support requests.

5. Data Sharing and Subprocessors

We do not sell your personal data. We only share your information with trusted third-party service providers (subprocessors) who help us operate our Service:

• Cloudflare, Inc.: Provides our core infrastructure, including hosting, networking, and data storage.
• Stripe, Inc.: Processes our subscription payments.
• Amazon Web Services, Inc. (AWS): Used for sending transactional emails (AWS SES) and for internal company email (AWS Workmail).
• Google LLC: Provides website analytics services (Google Analytics) for our website (vaultrice.com).
• GitHub, Inc.: Provides hosting for our website (vaultrice.com).

The use of your information by these third-party services is governed by their respective privacy policies.

These subprocessors protect your data in accordance with legal standards.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service.

• Application Data: When you delete your Vaultrice account, all associated application data is permanently deleted from our systems.
• Business Records: We retain business-relevant information (such as billing and payment records stored by Stripe) for as long as required by Swiss law.

7. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access, update, or delete the information we have on you.
• The right of rectification.
• The right to object to our processing of your personal data.
• The right of restriction.
• The right to data portability.
• The right to withdraw consent at any time.

You can exercise most of these rights directly through your account settings. For any other requests, please contact us at privacy@vaultrice.com.

8. International Data Transfers

Our Service is built on Cloudflare's global network. Your data may be stored and processed in various countries around the world. We rely on appropriate legal mechanisms, such as Standard Contractual Clauses, to ensure that your data is protected wherever it is processed.

9. Security

We take the security of your data very seriously and implement a range of technical and organizational measures to protect it. To learn more about our security practices, please see our Security Page.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@vaultrice.com.

12. Change Log

July 18, 2025

• first version