Privacy Policy

1. Information we collect

Information you provide

• Account information — your name, email address, and a securely hashed password when you create an account.
• Credential content — the licenses, certifications, documents, images, license numbers, issuing bodies, and expiration dates you choose to store in your vault.
• Sharing details — the read-only links you create and the settings you apply to them, such as expiration dates.
• Communications — messages you send us for support.

Information collected automatically

• Usage and device data — app and site interactions, device type, operating system, and log data such as IP address and timestamps, used to operate and secure the Service.

2. How we use information

• To provide, maintain, and operate the Service — storing your credentials and enabling the links you create.
• To send expiration reminders and important account or security notifications.
• To protect the Service and detect, prevent, and respond to fraud or abuse.
• To provide customer support and respond to your requests.
• To improve and develop features.
• To comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only in these limited circumstances:

• At your direction — when you create a read-only link, the specific credentials you include are shown to the people you share that link with, until it expires or you revoke it.
• Service providers — trusted vendors that host our infrastructure and help us operate the Service, bound by confidentiality and permitted to use the data only to provide services to us.
• Legal and safety — when required by law, subpoena, or to protect the rights, safety, and security of our users or the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Data security

We protect your data with AES-256 encryption at rest and in transit, access controls, and other technical and organizational safeguards. Credentials are private to your account and are never shared until you deliberately create a link. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete your stored credentials and personal information from our active systems, except where we must retain limited records to comply with legal obligations, resolve disputes, or enforce our agreements.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Residents of the EEA/UK (GDPR) and California (CCPA/CPRA), among others, have specific rights, including the right not to be discriminated against for exercising them.

To exercise any of these rights, email us at support@novravault.com. We will respond as required by applicable law.

7. Account deletion

You can permanently delete your account and all stored credentials at any time from within the app under Settings → Delete Account, or by emailing support@novravault.com. Once deleted, your data is removed from our active systems and cannot be recovered.

8. Children’s privacy

The Service is intended for professionals and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. Third-party services

The Service may let you import documents from third-party services (for example, cloud storage) and may link to third-party sites. Their handling of your information is governed by their own privacy policies, not this one.

10. International users

We operate in the United States, and your information may be processed and stored there. By using the Service, you understand your information may be transferred to and processed in the United States, which may have data-protection laws different from those in your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at support@novravault.com.

Novra Vault LLC · the State of Nebraska, United States