
Account information you provide directly — name, business details, email, phone, and identity-verification documents required by banking regulation.
Transaction data generated when you use Vaultly — payments, transfers, card activity, and balances.
Device and usage data such as IP address, browser type, and app interactions, collected automatically to secure and improve the service.
To open, verify, and service your account, including identity verification required by our banking partners and financial regulators.
To process payments and transfers, detect and prevent fraud, and provide customer support.
To improve our products, personalize your experience, and communicate updates about your account or new features.
All data is encrypted in transit and at rest using 256-bit AES encryption. Access to production systems is limited to authorized personnel and logged for audit.
We undergo regular third-party security assessments and maintain SOC 2 Type II compliance.
We retain account and transaction records for as long as required by banking and tax regulations — typically 7 years after account closure — and delete data outside these requirements upon request.
You can access, update, or request deletion of your personal information from your account settings or by contacting privacy@vaultly.co. Some information cannot be deleted while your account remains open, due to regulatory recordkeeping requirements.
You can opt out of marketing communications at any time; transactional and legally required notices will still be sent.
Our website uses cookies for authentication, analytics, and to remember your preferences. You can control cookies through your browser settings; disabling some cookies may limit site functionality.
Questions about this Privacy Policy can be directed to privacy@vaultly.co or 128 Market St, Suite 42, San Francisco, CA.