Privacy Policy.

What we collect

When you use Vault9 Studio, we collect:

• Phone number — for signing in and identifying your account
• Names you enter — your name and your partner’s name (or equivalent), submitted during a Vault
• Your answers — the responses you give during each Vault’s questions
• Payment metadata — Razorpay order and payment IDs (no card or UPI details reach our servers)
• Generated reports — saved to your account so you can revisit them

How we use it

• To authenticate you when you sign in
• To generate your personalised report
• To show your report history in “My Reports”
• To process payments through Razorpay
• To detect abuse or fraudulent activity

We do not sell your data, use it to train third-party AI models beyond report generation, or share it with advertisers.

Who we share it with

To run the service, your data is processed by a small number of third-party providers:

• Google Firebase — authentication + database storage (data hosted on Google Cloud)
• Anthropic — AI model that writes your report (your answers are sent to Anthropic’s API for that purpose only)
• Razorpay — payment processing
• Vercel — hosting and infrastructure

Each is bound by their own privacy policies and standard data processing agreements.

How long we keep it

Your data stays in your account until you delete it or ask us to delete your account. Reports can be removed anytime from My Reports. For full account deletion, email us (see below).

Your rights

You can:

• Access the data we have on you
• Correct any inaccurate personal data
• Delete your account and all associated reports
• Object to specific processing
• Ask us to hand over your data in a portable format

To exercise any of these, email us at luvinsa@gmail.com from the phone number linked to your account (or with proof of ownership). We’ll respond within 30 days.

Cookies & local storage

We use browser local storage to keep your in-progress assessment’s state and your signed-in session. We don’t use tracking or advertising cookies.

Children

Vault9 Studio is for adults (18+). We don’t knowingly collect data from anyone under 18. If we learn we’ve collected such data, we’ll delete it.

Security

We use industry-standard security practices: TLS/HTTPS for all traffic, HMAC-signed payment tokens, Firebase security rules for owner-only data access, and secrets stored as environment variables. No system is 100% secure — please use a strong sign-in method (like a phone number only you control).

Changes

We may update this policy. The “last updated” date at the top will change. Material changes will be highlighted on the site.

Contact

For any privacy questions or data requests, email luvinsa@gmail.com.