Privacy without marketing noise.

1. Scope

This Privacy Policy applies to the VultaNotes landing website, web app, and related service processes. For the service data described below, VultaNotes determines why and how it is processed.

2. Data we process

We process only the service data needed for trials, Premium, security, access recovery, payments, and support.

• Contact and email data: for trial and Premium activation, security codes, access recovery, payments, and support.
• Security and device data: a locally generated device code for access control and abuse prevention.
• IP address and request data: for security, troubleshooting, and limiting abuse.
• Trial and Premium data: customer, payment, and session references and the status and duration of your access.
• Payment data: Stripe processes the necessary payment, billing, and tax data. VultaNotes does not store card details itself.
• Support communications: the information you choose to send to support by email.

3. Why we process this data

• Performance of the agreement: for trials, Premium, access recovery, payments, and support you request.
• Legitimate interests: for security, abuse prevention, troubleshooting, and reliable operation of the service.
• Legal obligation: for data needed to meet tax, accounting, or other legal requirements.

4. What we do not collect

• No note content on our servers.
• No Masterkeys, Account secrets, or passwords on our servers.
• No ad profiles and no tracking for ad targeting.
• No sale of personal data.
• No external analytics/crash SDK in the current live implementation.

5. Local storage & encryption

Vault content, including Notes, Accounts with stored secrets, and Masterkeys, is stored locally on your device. An exported backup remains encrypted and requires its matching Masterkey.

For site and access functionality, VultaNotes uses local storage for your language preference, a device code, and, where applicable, access recovery data. This storage is not used for advertising or marketing tracking.

6. External service providers

For payments, email delivery, and operational service delivery, we use only carefully selected external service providers:

7. Retention

• Activation and recovery codes are valid for 10 minutes. The related request is deleted after successful verification, expiry, or too many failed attempts.
• Trial, Premium, and device data is kept as long as needed for active access, recovery, and abuse prevention, and longer where accounting or tax rules require it.
• Support emails are retained as reasonably necessary for case handling and follow-up.
• We do not retain vault content server-side.

8. International transfers

Some service providers may process data outside the European Economic Area. Current locations and safeguards are described in their applicable privacy and processing documentation.

VultaNotes limits transfers to the service data needed for the relevant service. Contact support if you would like more information.

9. Your rights

Depending on your jurisdiction (including EU/EEA rights under GDPR), you may exercise rights such as:

• Right of access to personal data we process.
• Right to correct inaccurate personal data.
• Right to erasure where applicable.
• Right to restrict or object to certain processing.
• Right to data portability where legally applicable.
• Right to lodge a complaint with your supervisory authority.

For personal data requests, contact support. We respond in line with applicable law.

10. Contact

For privacy questions or requests related to this policy, contact VultaNotes:

Data controller

VultaNotes

support@vultanotes.com

Chamber of Commerce 75267519

The full business details can be found under Business details.

We’ll respond to your message as soon as possible.