VaultlyAI
Privacy Policy.

1. Our Commitment to Privacy

We are strongly committed to protecting your privacy and keeping your data confidential and secure.

• We do not sell your personal data for money.
• We do not rent or trade lists of personal data for profit.
• Some disclosures to analytics or advertising technology providers may be treated as a “sale,” “sharing,” or targeted advertising under certain privacy laws even when no money is exchanged. Where applicable, we provide the required choices and honor qualifying opt-out signals.
• We take reasonable and appropriate measures to safeguard your information from unauthorized access, disclosure, or misuse.

2. Information We Collect

Information You Provide

• Name, email address, city, telephone number, and account or membership information
• Support requests, message content, and other communications
• Founding enrollment selections, consent records, and optional collection or feature feedback
• Consultation scheduling details, intake responses, communication preferences, and information you voluntarily share about your lifestyle, collection, priorities, or purchasing patterns
• Photos you upload
• Receipt images
• Insurance-related information, such as coverage limits or policy details
• Any associated item descriptions

Automatically Collected

• Internet Protocol address and basic server log information
• Browser type, operating system, referring page, and approximate request time
• Device information
• App usage data
• Analytics information, including pages viewed, navigation paths, interactions, referral sources, approximate location derived from IP address, timestamps, and cookie or device identifiers
• Cookie preferences and qualifying browser privacy signals

2A. Sources of Information

We collect information directly from you when you submit a form, schedule or participate in a consultation, begin enrollment, contact support, create or use an account, or upload content. We may also receive scheduling information from Calendly, transaction and payment-status information from Stripe, technical information from hosting and security providers, and information from service providers acting on our behalf.

3. How We Use Information

We use your data to:

• Analyze images and detect objects
• Extract receipt information
• Build and maintain a structured inventory of personal property
• Compare estimated item values with insurance coverage
• Generate summaries and recommendations
• Evaluate and improve AI-assisted features and App functionality using information permitted by this Policy and applicable consent choices
• Measure website traffic, performance, conversions, and engagement
• Provide and maintain the service
• Process Founding enrollment, verify consent, prevent duplicate purchases, and administer membership
• Schedule and conduct private consultations, understand individual needs, evaluate fit, personalize follow-up, and improve our services
• Respond to support requests and protect against fraud, abuse, and security incidents
• Comply with legal, tax, accounting, and regulatory obligations

4. Insurance Information & Future Partnerships

If you choose to provide insurance-related information, such as coverage limits or policy details, we use this data only to generate comparisons and insights within the App.

In the future, we may explore partnerships with insurance providers or related service companies.

If such partnerships occur:

• We will only share your data with your explicit consent where required by law.
• We may share aggregated or anonymized data that does not personally identify you.
• We will update this Privacy Policy and notify users of any material changes.

We will never share your personal data in ways that are inconsistent with this Privacy Policy or applicable laws.

5. AI Processing

VaultlyAI uses artificial intelligence and automated systems to provide portions of the service. The VaultlyAI Concierge currently uses the OpenAI API to generate informational responses. Questions and limited recent conversation context are transmitted to OpenAI for this purpose.

Our current Concierge integration requests that OpenAI not store response application state. OpenAI may nevertheless process and temporarily retain limited content and technical information for security, abuse prevention, and legal compliance under its applicable terms and data controls. OpenAI API content is not used to train OpenAI models by default unless the API customer affirmatively opts in.

Your uploaded content may also be processed using:

• Machine learning models
• Automated systems

AI-generated results may be incomplete, outdated, or inaccurate and should be independently verified. The Concierge does not make reservations, purchase tickets, confirm availability, or provide legal, financial, insurance, appraisal, or other professional advice. Do not submit payment-card information, passwords, government identifiers, confidential asset records, or other highly sensitive information through the Concierge.

VaultlyAI will not use identifiable customer photos, receipts, private inventory records, or Concierge conversations to train VaultlyAI models unless we first provide clear notice and obtain any consent required by law. We may use genuinely deidentified technical information and aggregate performance information to evaluate and improve the service.

6. Data Storage & Security

We take reasonable administrative, technical, and physical safeguards to protect your data.

However:

• No system is 100% secure.
• You use the App and upload data at your own risk.

6A. Security Incidents

If we become aware of a security incident affecting personal information, we will investigate, take reasonable steps to contain and remediate the incident, and provide notices to affected individuals or authorities when required by applicable law. You should promptly contact us if you believe your account, communications, or information may have been accessed without authorization.

7. Data Sharing

We do not sell your personal data for money. As explained below, disclosures involving analytics or advertising technologies may be legally characterized as a sale, sharing, or targeted advertising in some jurisdictions.

We may share limited information only in the following circumstances:

• With service providers, such as cloud hosting and AI processing, who assist in operating the App.
• With analytics providers, including Google Analytics, to measure traffic, performance, and interactions, subject to your choices and applicable law.
• With payment processing, email delivery, security, fraud-prevention, professional advisory, and infrastructure providers.
• If required by law, regulation, or legal process.
• To investigate fraud, abuse, security incidents, or violations; protect users, VaultlyAI, or the public; and establish, exercise, or defend legal claims.
• In connection with a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate confidentiality and legal safeguards.
• With your explicit consent.

7A. Founding Member Program & Payment Processing

If you choose to become a VaultlyAI Founding Member, we collect the information necessary to process your purchase, administer your membership, and communicate important updates regarding the development and launch of the platform.

Payments are securely processed by our third-party payment processor. VaultlyAI does not store your complete payment card information.

Information associated with your Founding Membership, such as your name, email address, payment status, transaction reference, and membership status, is used to manage the Founding Member program, fulfill your membership benefits, provide support, and communicate updates about VaultlyAI. When you voluntarily provide information about your collection, priorities, desired features, or expectations for the app, we may also use that feedback to understand member priorities and inform product development.

7B. Founding Enrollment Details & Voluntary Feedback

If VaultlyAI presents a Founding Membership offer following a consultation and you choose to proceed to enrollment, we may also collect your selected membership term, telephone number if provided, acceptance of the applicable terms, and any optional information you submit about your collection, priorities, desired features, or expectations for the final app.

Enrollment information, including city and any voluntary collection or feature feedback, is transmitted to our payment processor to create and administer the checkout session and may be retained with that session as transaction metadata, including where checkout is not completed. VaultlyAI writes city and voluntary feedback to its Founding Member database only after the payment processor confirms a successful payment. Voluntary feedback may be reviewed by VaultlyAI to better understand member priorities and inform product development. Providing this optional feedback does not guarantee that any particular feature, workflow, or request will be included in a final product.

Our current payment processor is Stripe. Stripe processes information under its own privacy terms and security practices. VaultlyAI does not receive or store your complete payment card number through the Founding enrollment form.

If a private offer and checkout are made available, city may be required for Founding enrollment, while collection, priority, and feature feedback remains optional. These fields may accompany the secure Stripe checkout session so they can be matched to the correct transaction. They are added to VaultlyAI's Founding Member database only after Stripe confirms successful payment; failed, canceled, and expired checkout sessions are not added to that database.

7C. Website Technologies and External Services

VaultlyAI uses Google Analytics to understand website traffic, referral sources, page views, interactions, performance, and conversions. Google Analytics may use first-party cookies and similar identifiers and may receive internet or electronic-network activity, device and browser information, approximate location derived from IP address, referral information, and interaction data. Google processes this information under its own terms and privacy practices.

Depending on our Google Analytics configuration and applicable law, disclosures to Google may be considered a sale, sharing, or processing for targeted advertising even where no money is exchanged. We do not sell lists of personal information for money. Where required, nonessential analytics will not load until consent is provided, and visitors may reject or later withdraw that consent through our privacy controls. We do not knowingly send names, email addresses, payment-card information, private inventory contents, or other information that directly identifies an individual to Google Analytics.

Our pages use Google Fonts, and a visitor’s browser may connect to Google to retrieve font files. Founding checkout, if offered, is hosted by Stripe, which may collect transaction, device, cookie, and usage information under its own privacy terms. Consultation scheduling is provided through Calendly, which may collect scheduling, contact, device, cookie and usage information under its own privacy terms. Our hosting provider may create standard server logs for security and operational purposes.

When you use the VaultlyAI Concierge, we process the questions and follow-up messages you submit, together with limited conversation context, through the OpenAI API to provide AI-generated informational responses. Conversation context is also maintained temporarily in a server-side session so follow-up questions can be understood.

Our editorial pages and article search are publicly available. Article search terms are used in your browser to filter the published catalog. Articles may link to or display media associated with hotels, restaurants, retailers, venues, events, publishers, photographers, and other independent third parties. Loading externally hosted media or following a third-party link may disclose your IP address, browser information, and referring origin to that third party, which operates under its own privacy practices.

Our current website does not respond differently to legacy browser “Do Not Track” signals. Where applicable law requires us to honor a qualifying opt-out preference signal, such as Global Privacy Control, we will treat that signal as a request to opt out of sale, sharing, or targeted advertising for that browser or device.

7C-1. Private Consultations and Calendly

When you request a private consultation, Calendly may process your name, email address, telephone number, time zone, availability, appointment details, intake responses, IP address, device information and related scheduling activity. VaultlyAI receives the scheduling and intake information needed to prepare for and conduct the meeting. Calendly operates under its own privacy policy and may use cookies or similar technologies necessary to provide its scheduling service.

During a consultation, you may voluntarily discuss your lifestyle, collection categories, purchasing frequency or scale, recordkeeping, protection priorities, desired features and other personal preferences. We use that information to understand your needs, evaluate whether and how VaultlyAI may help, personalize communications, improve the prospective member experience and inform product development. Booking a consultation is optional, creates no purchase obligation, and does not guarantee a membership offer or product availability.

Please do not place payment-card details, passwords, government identifiers, insurance-policy numbers, precise storage locations or detailed confidential asset records in Calendly intake fields. If a meeting is recorded or transcribed, we will provide notice and obtain any consent required by applicable law before recording begins.

7D. Cookies and Consent Choices

We may use strictly necessary cookies for security, rate limiting, session continuity, payment flow, and preference storage. Where required by law, analytics and other nonessential technologies are disabled until you make an affirmative choice. You may reject nonessential technologies without losing access to the basic website and may change your selection through the available privacy controls.

Cookie duration varies by purpose and provider. Google Analytics commonly uses identifiers such as _ga and related cookies to distinguish browsers and measure activity. Browser settings can also be used to block or delete cookies, although blocking strictly necessary cookies may impair requested functionality.

7E. Email, Support, and Communications

Support-form submissions may include your name, email address, optional telephone number, subject, message, submission time, and IP address. Submissions are delivered through email and hosting infrastructure and should not include passwords, payment-card details, government identifiers, or detailed private asset records.

We may send transactional, membership, security, legal, and service communications necessary to administer your relationship with VaultlyAI. Promotional messages will include a clear way to opt out where required. Opting out of marketing does not prevent necessary transactional or legal communications.

8. Your Rights

Depending on your location, you may have rights to:

• Access your data
• Request correction of your data
• Request deletion of your data
• Request a portable copy of certain data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of a sale, sharing, targeted advertising, or certain profiling where applicable
• Limit certain uses or disclosures of sensitive personal information where applicable

To exercise these rights, contact us at info@vaultlyai.com.

We may need to verify your identity before completing a request. We will not discriminate against you for exercising a privacy right protected by applicable law. If applicable law gives you a right to appeal our response, you may submit an appeal through the same contact address with the subject line “Privacy Appeal.”

Where permitted, an authorized agent may submit a request for you, but we may require proof of the agent’s authority and direct verification with you. Qualifying browser opt-out preference signals are handled as described above. Rights and response procedures vary by jurisdiction, and legal exceptions may permit or require us to retain certain information.

9. Data Retention

We retain your data only as long as necessary to:

• Provide and maintain the App
• Improve functionality and performance

You may request deletion of your account and associated personal data at any time through our Support page or by contacting us at info@vaultlyai.com. Once your request has been verified, we will process it in accordance with applicable laws and our data retention practices.

Founding enrollment, consent, payment, and membership records may be retained for as long as reasonably necessary to administer the program, match future account access, provide support, prevent duplicate purchases, maintain financial and transaction records, resolve disputes, and comply with legal, tax, accounting, or regulatory obligations.

Support communications and related technical records are retained for as long as reasonably necessary to respond, maintain business records, prevent abuse, and protect our rights and systems. Retention periods vary according to the nature and sensitivity of the information, the purpose for which it was collected, applicable legal requirements, and whether the information is needed to establish, exercise, or defend legal claims.

Concierge context is retained in a temporary server-side session and may be deleted when the session expires. OpenAI may temporarily retain API content and related technical information under its applicable data controls. Google Analytics information is retained according to the retention setting configured in our Analytics property. Cookie-consent records are retained as reasonably necessary to remember and demonstrate your selection. Backup copies may remain for a limited period after operational deletion before being overwritten.

9A. Deleted Content and Data Retention for Service Improvement

When you delete an item from your inventory within the App:

• The item will be removed from your visible inventory and no longer accessible to you.
• The item will no longer be used in your coverage calculations, alerts, or user-facing features.

However, in order to improve the performance, accuracy, and functionality of our services, we may retain certain data associated with deleted items in an anonymized and non-identifiable form.

This may include:

• De-identified derived features or processed representations of images, but only where they cannot reasonably be linked to you, your account, a person, a household, or a specific property
• Item categories or labels
• Detection outputs and system-generated metadata

We take steps to ensure that:

• Retained data is no longer linked to your identity or account.
• Personal identifiers are removed or anonymized.
• Data is used only for internal research, analysis, and improvement of our AI systems.

We do not treat a full image as anonymous merely because account identifiers have been removed. If an image or processed representation still contains reasonably identifying details, it remains personal data and is handled under the other provisions of this Privacy Policy rather than as anonymized data.

We do not:

• Sell this data
• Use it for advertising purposes
• Share it with third parties in a way that identifies you

Where required by applicable law, you may request deletion of your data, including data retained for service improvement, by contacting us at info@vaultlyai.com.

10. Children’s Privacy

The App, website enrollment, and Founding Membership are intended only for adults aged 18 or older.

We do not knowingly collect personal data from anyone under 18. If we learn that we collected personal information from a person under 18, we will take reasonable steps to delete it, subject to applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

If changes are material, we will provide prominent notice and obtain additional consent where required. We will not apply materially broader uses of previously collected personal information retroactively where doing so would violate applicable law or our prior commitments.

11A. Dispute Resolution

Contractual disputes concerning VaultlyAI are governed by the dispute-resolution provisions in the applicable Terms of Use or Founding Member Terms that you accept. The standard arbitration provision used in those agreements states:

“All disputes arising out of or in connection with the present contract shall be finally settled under the Rules of Arbitration of the International Chamber of Commerce by one or more arbitrators appointed in accordance with the said Rules.”

Nothing in this Privacy Policy limits any privacy right, complaint mechanism, regulatory remedy, or other right that cannot lawfully be waived.

11B. International Processing

VaultlyAI and its service providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we use recognized contractual or legal safeguards for international transfers. If we intentionally offer regulated services in a jurisdiction requiring additional controller, representative, legal-basis, or supervisory-authority information, we will provide the required supplemental notice.

12. Contact

If you have any questions about this Privacy Policy, contact us at info@vaultlyai.com.