Privacy Notice

1. Who we are

The company that operates vaults.world is the controller of the personal information described in this notice.

You can contact us about this notice or your information through our contact form.

2. What this notice covers

It covers visitors to vaults.world and people who contact us. It does not cover project information that our customers put into the Vaults product: for that data, the customer organisation decides how it is used, and we process it on their behalf under our agreement with them. If you use Vaults through your employer, contact them first about that information.

3. Information we collect

When you send the contact form

• Your full name, work email address, company, and country or region.
• Your role and phone number, if you choose to give them.
• What you write in your message. Please don’t include sensitive personal information; we don’t need it to answer you.

Technical information

• Your IP address is used when the request arrives, to protect the form from abuse. We don’t store the address itself: we store a keyed one-way code derived from it, which lets us limit how many messages one connection can send but can’t be turned back into your IP address.
• The browser type (user agent) that sent the form, kept with the enquiry to help us spot automated abuse.
• Our hosting and network providers keep short-lived server and security logs, which include IP addresses, to run and protect the site.

We don’t use analytics or advertising tools on vaults.world, and we don’t buy information about you from others.

4. How we use it and why we’re allowed to

5. No marketing without your agreement

Sending the contact form doesn’t sign you up to a newsletter or marketing list. We use your details to reply to your enquiry. We’ll only send you marketing if you separately agree to it, and you can withdraw that agreement at any time.

6. AI and automated decisions

Vaults is an AI-native product, but we don’t send your enquiry to AI services, use it to train AI models, or make decisions about you by automated means. A person on our team reads and answers every enquiry.

7. Who we share it with

We don’t sell or rent personal information. We share it only with service providers that help us run the site, under contracts that limit their use of it:

• Resend, which delivers your enquiry to our team by email.
• Our hosting provider, which runs the servers and database.
• Cloudflare, which delivers the website and protects it from attacks.

We may also disclose information where the law requires it, or to a buyer or successor if our business is reorganised, subject to this notice.

8. International transfers

Vaults is hosted outside the UAE, and some of our providers process information in other countries, including the United States. Where the law requires it (including the UAE PDPL), we rely on appropriate safeguards such as contractual clauses, and we choose providers with recognised security practices.

9. How long we keep it

• Enquiries are deleted automatically 24 months after they arrive, unless they become part of a customer relationship, in which case our customer agreement and records obligations apply.
• The keyed code derived from your IP address is kept with the enquiry and deleted with it.
• Server and security logs are kept by our providers for short periods for operation and security.

10. Security

The site is served only over encrypted connections (HTTPS). Access to enquiries is limited to authorised members of our team, and the systems that hold them are access-controlled and monitored. No system is perfectly secure, but we work to protect your information and will act promptly if something goes wrong.

11. Cookies

The vaults.world website doesn’t set analytics, advertising or tracking cookies, so we don’t ask for cookie consent. Two kinds of strictly necessary cookies may be used:

• Security cookies that our network provider, Cloudflare, may set to tell people from automated traffic.
• A sign-in cookie (vaults_session) on the Vaults product, set only when a customer user signs in. It keeps you signed in for up to 14 days and is removed when you sign out.

If we ever add optional cookies, we’ll update this notice and ask for your consent first.

12. Your rights

Depending on where you live, you can ask us to:

• give you a copy of your personal information;
• correct it, or complete it if it’s incomplete;
• delete it;
• restrict or object to how we use it, including use based on our legitimate interests;
• give it to you, or to another organisation, in a portable format;
• withdraw consent you’ve given, without affecting what we did before.

To make a request, contact us through our contact form. We may need to confirm your identity first. We won’t charge you, and we’ll reply within the time the law allows, normally within one month.

You can also complain to a data protection authority, for example the UAE’s data protection regulator (supervision under the PDPL is moving to the Federal Authority for AI and Data), the authority where you live or work in the European Economic Area, or the UK Information Commissioner’s Office. We’d appreciate the chance to resolve your concern first.

13. Children

vaults.world is a business website and isn’t intended for children. We don’t knowingly collect information from anyone under 18.

14. Changes to this notice

If we change how we handle personal information, we’ll update this page and the date at the top. Significant changes will be highlighted here.