Privacy Policy

Vaultak ("we", "our", or "us") operates the Vaultak platform, including vaultak.com, app.vaultak.com, and the Vaultak SDK. This Privacy Policy explains how we collect, use, and protect your information.

Information We Collect

• Account information: Email address and name when you sign up.
• Agent data: Actions, risk scores, alerts, and audit logs generated by your AI agents.
• Usage data: API request counts, timestamps, and error logs.
• Authentication data: Handled by Clerk. We never store passwords.

How We Use Your Information

• To provide and improve the Vaultak service
• To send transactional emails (API keys, alerts, account notifications)
• To detect abuse and enforce rate limits
• To generate anonymized usage statistics

Data Storage and Security

Your data is stored in a managed PostgreSQL database hosted on Railway in the EU (europe-west4). All data is encrypted in transit using TLS 1.2+. API keys are stored as SHA-256 hashes and are never recoverable in plaintext.

Data Sharing

We do not sell your data. We share data only with the following service providers who help us operate the platform:

• Railway — infrastructure hosting
• Vercel — dashboard hosting
• Clerk — user authentication
• Resend — transactional email

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting privacy@vaultak.com. We will process deletion requests within 30 days.

Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact privacy@vaultak.com.

Cookies

Vaultak uses only essential cookies required for authentication. We do not use tracking or advertising cookies.

Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on our website.