Privacy Policy

Project Vault App LLC ("we," "us," or "our") is committed to protecting the privacy of our users, particularly municipalities and government entities that entrust us with sensitive public data. This Privacy Policy explains how we collect, use, store, and protect your information.

We collect the following types of information:

• Account Information: Name, email address, phone number, job title, and organization details provided during registration.
• Project Data: Construction project details, financial records, daily logs, documents, meeting minutes, and other content you create or upload.
• Usage Data: Log data including IP addresses, browser type, pages visited, and feature usage patterns.
• Communication Data: Information from support requests and correspondence with us.

• To provide, maintain, and improve the Service
• To authenticate users and manage access permissions
• To send transactional emails (account verification, password resets, team invitations)
• To generate reports and analytics within your organization
• To provide customer support
• To comply with legal obligations

All data is stored on secure, enterprise-grade cloud infrastructure (Supabase and Vercel, built on AWS) located within the United States. We employ industry-standard security measures including encryption at rest (AES-256) and in transit (TLS 1.2+), database-level role-based access controls (row-level security), and two-factor authentication. Database backups are performed daily.

We recognize that data managed by municipal users may be subject to public records laws (e.g., FOIA, state open records acts). We will cooperate with lawful public records requests directed to your organization. We do not independently disclose your data in response to third-party requests without your knowledge, except as required by law or valid legal process directed at Project Vault.

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating the Service (e.g., hosting, email delivery), bound by confidentiality agreements.
• Legal Requirements: When required by law, regulation, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users.

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, you may request a data export within 30 days. After this period, data will be securely deleted within 90 days, unless retention is required by law or for legitimate business purposes such as resolving disputes.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Export your data in a portable format
• Opt out of non-essential communications

To exercise any of these rights, contact us at support@projectvaultapp.com.

We use essential cookies required for authentication and session management. We do not use third-party advertising cookies or trackers. Analytics data is collected in aggregate form to improve the Service and is not linked to individual users.

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

For privacy-related inquiries, contact us at support@projectvaultapp.com.