Legal
Privacy Policy
How Vaulter collects, uses, and protects your information.
Last updated: 13 March 2026
Vaulter (“we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you access or use our website, applications, CLI, MCP integrations, and related services (collectively, the “Service”).
By using the Service, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
a. Information You Provide
We may collect information you provide directly, such as:
- name
- email address
- account credentials or authentication identifiers
- billing information, if applicable
- support requests and communications
- workspace, configuration, or integration settings
b. Usage Information
We may automatically collect certain information about how you use the Service, including:
- IP address
- browser type and device information
- operating system
- pages viewed and interactions
- timestamps and referring URLs
- diagnostics, crash logs, and performance data
c. Integration and Technical Data
If you connect third-party services or developer tools, we may process technical metadata necessary to support those integrations.
d. Sensitive Data
Vaulter is built to reduce unnecessary access to sensitive secrets and credentials. However, depending on how you use the Service, we may process encrypted or protected configuration-related information required to operate the product.
2. How We Use Information
We use information to:
- provide, maintain, and improve the Service
- authenticate users and secure accounts
- support product features and integrations
- respond to inquiries and provide support
- monitor reliability, performance, and abuse
- detect, investigate, and prevent fraud or security incidents
- comply with legal obligations
- communicate important service or policy updates
3. Legal Bases for Processing
Where required by law, we process personal data on one or more of the following bases:
- performance of a contract
- legitimate interests
- consent
- compliance with legal obligations
4. How We Share Information
We do not sell your personal information.
We may share information with:
- service providers that help us operate the Service, such as hosting, analytics, authentication, support, and infrastructure vendors
- professional advisors, such as lawyers, auditors, or insurers
- law enforcement or regulators when required by law
- successors in connection with a merger, acquisition, financing, or sale of assets
We share only as reasonably necessary for these purposes.
5. Data Retention
We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, and maintain legitimate business records.
Retention periods may vary depending on the type of data and the purpose for which it was collected.
6. Security
We use reasonable security measures designed to protect information from unauthorized access, alteration, disclosure, or destruction. These measures may include encryption, access controls, logging, monitoring, and secure infrastructure practices.
No system is perfectly secure, and we cannot guarantee absolute security.
7. Cookies and Similar Technologies
We may use cookies and similar technologies to:
- keep you signed in
- remember preferences
- understand usage patterns
- improve performance and user experience
You can usually manage cookies through your browser settings. Disabling cookies may affect Service functionality.
8. International Data Transfers
Your information may be processed in countries other than your own. Where required, we take steps designed to ensure appropriate safeguards for international transfers.
9. Your Rights
Depending on your location, you may have rights to:
- access your personal information
- correct inaccurate information
- request deletion
- object to or restrict certain processing
- request data portability
- withdraw consent where processing is based on consent
To exercise these rights, contact us at privacy@vaulter.in.
10. Third-Party Services
The Service may contain links to or integrations with third-party websites, platforms, or tools. Their privacy practices are governed by their own policies, not this Privacy Policy.
11. Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice.