The short version
- Your documents are processed in your browser, on your device. They are not sent to us.
- There are no accounts, no advertising, no analytics and no tracking cookies.
- If you buy Pro, Stripe processes the payment. Our license server sees your order details (such as your name, email address, plan and subscription status) so it can issue your license key.
- If you email us, we see your email and use it to reply.
- We don't sell or share personal information, and we don't use it for advertising.
Who we are and how to reach us
Vault Studio Pro (vaultstudiopro.com) is an independent sole proprietorship based in the United States ("we", "us", "our").
Email: support@vaultstudiopro.com — we're a web-based business and handle all contact by email rather than a public mailing address.
Your documents and files
Files you open, create or edit in the app are processed inside your browser. We do not receive, store or have access to them, and we can't recover them for you. The site's Content-Security-Policy tells your browser to refuse network connections from the app to any website other than vaultstudiopro.com. The security page explains how that works and where its limits are.
Information stored on your device
The app keeps the following in your browser's storage (IndexedDB, localStorage and sessionStorage):
- your projects, drafts and, if you use it, revision history;
- settings such as the colour theme, and a default signature if you save one;
- the date your 7-day trial started, and your license key if you have one;
- if you choose "Make available offline", a copy of the app's own files.
This stays on your device and is not sent to us. It is not encrypted by the app, so anyone who can use your browser profile can open it. You can delete it at any time by deleting projects in the app or by clearing this site's data in your browser. Files you export as encrypted .vault files are protected with AES-256-GCM and your password.
Payments
Purchases are processed by Stripe, which collects your payment details under its own privacy policy. Your card details go to Stripe and never touch our servers. We can see the order information Stripe holds for your purchase: your name, email address, the plan you bought, the amount, and the payment and subscription status. Stripe may also collect your billing address to calculate sales tax.
License keys
The app contacts our license server in only two situations:
- right after checkout, it sends the Stripe checkout session ID and receives your license key;
- near the end of a subscription period, it sends your license key and receives a renewed key.
To answer these requests, the license server reads your order from Stripe. Your license key contains your plan, its dates and the name or email address from your order (as the licensee). The license server does not receive your documents, file names or anything about how you use the app. Keys are checked on your device without contacting us.
If an order is refunded or charged back, its license ID (not your name or email) is added to a list of revoked keys that ships with app updates.
Website hosting and logs
The website and the license server are hosted on Cloudflare. Like any web host, Cloudflare processes technical information such as your IP address, browser user agent and the pages requested, and may keep standard request logs to deliver the site and protect it from abuse. Cloudflare handles this information under its own privacy policy. We do not use it to track or profile visitors.
Cookies and analytics
We don't set cookies, and there are no analytics, advertising or tracking scripts on this website or in the app. If Cloudflare needs to check for abusive traffic, it may set a strictly necessary security cookie.
Dictation
If you turn on dictation in Docs, your browser's speech recognition service processes your audio: Google in Chrome, Apple in Safari, under their own privacy policies. We don't receive the audio or the transcript. The app asks for your consent before dictation starts. Read aloud uses your browser's built-in voices.
If you email us, we receive your email address and your message, and use them to answer you (for example to find your order, reissue a key or process a refund). Our email is stored by an email hosting provider on our behalf.
How long we keep information
- Documents: we never have them. Data in your browser stays until you delete it.
- Order records: kept by Stripe, and by us for as long as your license is valid and as long as tax and accounting rules require.
- Support emails: kept while we help you and for our records afterwards. You can ask us to delete them.
- Request logs: kept by Cloudflare under its own policies.
Who we share information with
We do not sell or rent personal information, and we do not share it for advertising. We use a small number of service providers to run Vault Studio Pro: Stripe (payments), Cloudflare (hosting and the license server) and our email hosting provider. We may also disclose information if the law requires it.
Your rights
You can ask us what personal information we hold about you, and ask us to correct or delete it. In practice this means your order records and any emails you have sent us. Email support@vaultstudiopro.com from the address you used at checkout. We will reply within the time the law requires, and we won't treat you differently for asking. We may need to keep some order records to meet tax and accounting obligations, and deleting them may mean we can't reissue your license key later.
Children
Vault Studio Pro is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, email us and we will delete it.
Changes to this policy
If we change this policy, we will post the new version here and update the date at the top. We will note significant changes in the changelog.