Privacy Policy

We collect information you provide directly, including account details (name, email, handle, avatar), uploaded content (files, covers, metadata), legal rights data, collaborator and split details, deposit proof metadata, contacts, campaign details, preferences, support messages, and marketplace or billing-related information.

We also collect technical and usage information needed to run and protect the service, such as IP address, device and browser data, logs, cookies, and identifiers.

We use data to create and manage accounts, process and deliver files, power sharing and collaboration features, generate deposit proofs and legal exports you request, send emails on your instruction, provide analytics dashboards, prevent abuse and fraud, enforce safety limits, improve product quality, and provide customer support.

We record activity such as opens, clicks, plays, downloads, and favorites to provide engagement analytics. We may also apply protections to reduce automated scans and improve metric quality.

If you connect Gmail, we store and use the required tokens to send emails on your behalf. You control recipients and message content. Based on your settings, we may attach files in outgoing campaigns.

Purchases, subscriptions, marketplace payouts, and related payment operations are processed by Stripe. We receive payment status, amount, and related metadata, but we do not store full payment card details.

When you publish or share packs, tracks, folders, or series, they may be available through public or tokenized links according to your access settings. Anyone with access can view, stream, or download based on your configuration and licensing rules.

If you enable a public legal badge for a protected track, we may display limited rights and proof metadata on the public page, such as protection status, proof date, and a certificate link you choose to expose through vvault.

We use third-party providers for hosting, storage, analytics, messaging, and payments. These providers may process data only as needed to provide services to vvault under contractual protections.

We keep data for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements.

Proof records, legal snapshots, and related contract exports may be retained longer than active file availability where reasonably necessary to preserve auditability, rights history, or dispute records.

We implement reasonable technical and organizational safeguards, but no system can guarantee absolute security.

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your data. To make a request, contact us at vvaultapp@gmail.com.

If you connect Google services (including Gmail), we do not sell Google user data.

We use Google user data only to provide and improve user-facing features you request (for example, sending emails through your connected Gmail account) and to maintain service security and reliability.

We share, transfer, or disclose Google user data only with (a) service providers/subprocessors that help us operate vvault under contract, (b) recipients you direct us to contact through connected Gmail features, (c) legal authorities when required by law or necessary to prevent fraud, abuse, or security incidents, and (d) a successor entity in a merger, acquisition, or asset sale, subject to this policy or notice.

We do not use Google user data for advertising purposes.

For privacy requests or questions, contact us via the in-app Support page or email vvaultapp@gmail.com.