Privacy Policy

1. Information We Collect

Personal Information

We may collect the following personal information when you create an account, book a service, or contact us:

• Name (first and last)
• Email address
• Phone number
• Physical address (service location and/or mailing address)
• Photos of items you upload for assessment or resale

Payment Information

Payment information (credit card numbers, billing address) is collected and processed directly by Stripe, our third-party payment processor. VaultXL does not store your full credit card number on our servers.

Usage Data

We automatically collect certain information when you visit our website, including:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookies and similar tracking technologies (see Section 9)

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide services: To coordinate estate transitions, logistics, resale, and storage services you have requested
• Process payments: To process bookings, charges, refunds, and payouts through Stripe
• Communicate: To send service confirmations, updates, receipts, and respond to your inquiries
• AI analysis: To analyze photos of items you upload using artificial intelligence (powered by Anthropic Claude) to provide valuations, descriptions, and recommendations
• Improve services: To understand how our website and services are used and to enhance the user experience
• Marketing: To send promotional communications (you may opt out at any time)
• Legal compliance: To comply with applicable laws, regulations, and legal processes

3. Third-Party Services

We use the following third-party services to operate our platform. Each has its own privacy policy governing the use of your information:

• Stripe — Payment processing. Stripe collects and processes payment information in accordance with PCI-DSS standards. Stripe Privacy Policy
• Supabase — Database and user authentication. Your account data and project information are stored securely on Supabase infrastructure. Supabase Privacy Policy
• Resend — Transactional and marketing email delivery. Your email address is shared with Resend to send service-related communications. Resend Privacy Policy
• Anthropic (Claude) — AI-powered photo analysis and item assessment. Photos you upload may be processed by Anthropic's Claude AI to generate descriptions and valuations. Anthropic Privacy Policy
• Google Analytics — Website analytics and usage tracking. Collects anonymized usage data to help us understand how visitors interact with our site. Google Privacy Policy
• Vercel — Website hosting and infrastructure. Our website is hosted on Vercel's platform. Vercel Privacy Policy

4. Data Retention

We retain your personal information for as long as your account is active and for a period of three (3) years after account closure or last service engagement. This allows us to address any post-service inquiries, disputes, or warranty claims.

Financial and transaction records are retained for a minimum of seven (7) years in accordance with IRS record-keeping requirements and applicable tax laws.

You may request deletion of your personal data at any time (see Section 6). Certain data may be retained as required by law even after a deletion request.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Encryption at rest: Sensitive data stored in our database is encrypted at rest
• Access controls: Access to personal data is restricted to authorized personnel on a need-to-know basis
• Secure authentication: User accounts are protected with secure authentication through Supabase

While we take reasonable measures to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you
• Correction: You may request that we correct any inaccurate or incomplete personal information
• Deletion: You may request that we delete your personal information, subject to legal retention requirements

To exercise any of these rights, please contact us at support@vaultxl.com. We will respond to your request within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: You have the right to opt out of the sale of your personal information
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

We do NOT sell your personal information. VaultXL has never sold personal information and has no plans to do so.

To exercise your CCPA rights, contact us at support@vaultxl.com.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at support@vaultxl.com.

9. Cookies

VaultXL uses cookies and similar technologies to enhance your experience on our website. The types of cookies we use include:

• Essential/Session cookies: Required for the website to function properly, including authentication and security
• Analytics cookies: Used by Google Analytics to collect anonymized data about how visitors use our site, helping us improve performance and content
• Preference cookies: Remember your settings and preferences for a better experience on return visits

How to Opt Out

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of our website. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this page. Your continued use of our services after any changes constitutes your acceptance of the revised policy.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: support@vaultxl.com
• Phone: (704) 900-1234
• Address: Charlotte, NC