Privacy policy

What we collect

Your account. When you sign up we store your email address and a securely hashed password so you can sign in and manage your vault.

What you put in your vault. The content you add — text, images, links, services, and settings. Anything on a published vault is public by design; that is the point of the product.

Messages and reviews. If someone sends you an enquiry or leaves a review, we store what they submit (such as their name, email, and message) so we can pass it to you.

Client records. When you mark an enquiry as won, or a client confirms their review, we add that person to your private client list: their name, email address, the jobs and reviews linked to them, any amount you record, and any private notes you write. We also record whether they ticked “Keep in touch” on the form, when they did, and the exact wording they saw. Client records are private to your account and are never shown on your public vault.

Anonymous analytics. We count page views and which sections are opened, so you can see how your vault performs. This is aggregate and does not identify individual visitors — we do not collect visitor names, precise location, or advertising identifiers.

How we use it

To run the service: to show your vault, deliver enquiries and reviews to you, keep your account secure, and give you basic analytics. We do not sell your data, and we do not show third-party ads. We never use the details of your clients to market to them ourselves; any follow-up is written and sent by you.

If you contacted or reviewed someone on vaulb

When you send an enquiry or leave a review, we pass your details to the professional whose vault it is, and store them on their behalf. If they mark your job as won, or your review is confirmed, you appear in their private client list.

Keep in touch is optional. If you tick it, that professional may email you with follow-ups, service reminders and the occasional note about booking again. If you don’t, vaulb won’t suggest they contact you. Either way, vaulb itself will not send you marketing.

Changing your mind. You can opt out at any time: reply to the professional and ask them to stop, or email us and we will mark you as “do not contact”. You can also ask for your details to be removed from their client list. A review you published stays on their vault unless you ask us to remove it.

How long we keep it. Your details stay in the professional’s client list until they delete you, or delete their account, or you ask us to remove them.

Who processes data for us

We use a small set of trusted providers to operate the service: Supabase (database, authentication, and file storage), Vercel (hosting), Anthropic (the AI writing helpers), Resend (sending notification emails), Cloudflare (Turnstile, a bot check on public forms that briefly receives your IP address), and Sentry (error monitoring). Each processes data only to provide their part of the service.

Cookies

We use the minimum cookies needed to keep you signed in and secure. We do not use advertising or cross-site tracking cookies.

Your choices

You can delete your whole account at any time from the Account page in your dashboard. You can edit or unpublish your vault at any time, and you can permanently delete it and your account from the dashboard. You can remove any individual client from your client list, or mark them as “do not contact”. If you would like a copy of your data or want it erased, contact us and we will help.

Contact

Questions about privacy? Email contact@vaulb.co.