Privacy Policy

This Privacy Policy explains how InVault LLC (“InVault,” “we,” “us,” or “our”) handles personal information in connection with the corporate website located at invaulthq.com (the “Site”).

Where applicable data-protection law uses the term “controller,” InVault LLC is the controller of personal information processed for the purposes described in this Privacy Policy.

This Privacy Policy applies specifically to invaulthq.com. It does not govern separate websites, platforms or independent third-party services linked from the Site, including invault.co, which may maintain their own privacy notices.

1. Information we collect

The Site is primarily an informational corporate website. It does not currently provide user accounts, online purchasing, application forms, newsletter registration or other functionality that requires visitors to create profiles or submit personal information directly through the Site.

You are not required to provide personal information simply to browse the Site.

We may nevertheless process limited personal information in the circumstances described below.

Information you provide voluntarily

If you contact InVault by email, telephone, WhatsApp, Telegram or another communication channel, we may receive information such as your:

• name;
• company or organization;
• email address;
• telephone number or messaging identifier;
• professional or business information;
• contents of your message and subsequent correspondence; and
• any other information you choose to provide.

If you contact us regarding a business inquiry or potential relationship, certain information may be necessary for us to understand and respond to your request.

Please avoid sending sensitive personal information unless it is genuinely necessary for the purpose of your communication.

Technical and website information

When you access the Site, limited technical information may be processed automatically by our hosting, security and network providers.

This may include information such as:

• IP address;
• browser and device information;
• operating system;
• requested URL or page;
• date and time of requests;
• referring page or website;
• network and routing information;
• security signals; and
• information necessary to detect abuse, malicious traffic, technical errors or security incidents.

This information is primarily processed to deliver, secure and maintain the Site.

2. How we use information

We may process personal information for legitimate business purposes including the following.

Operating and securing the Site

To deliver website content, maintain availability, troubleshoot technical issues, detect or prevent abuse and protect our systems and infrastructure.

Responding to communications

To respond when you contact us, answer questions, provide requested information and manage business correspondence.

Business discussions and relationships

To evaluate or manage legitimate business inquiries, prospective engagements, supplier or professional relationships and related communications.

Corporate administration and recordkeeping

To maintain appropriate business records and document communications where reasonably necessary.

Legal and compliance purposes

To comply with applicable law, lawful governmental requests, contractual obligations, dispute-resolution requirements, fraud-prevention measures and the establishment, exercise or defense of legal rights.

No automated decision-making or behavioral profiling

InVault does not use information collected through this corporate Site to make automated decisions about individuals or to conduct behavioral profiling.

We do not use information collected through this Site to build advertising profiles or sell visitor data.

3. Legal bases where EU or UK data-protection law applies

Where the European Union General Data Protection Regulation, UK GDPR or similar data-protection laws apply to particular processing, we may rely on one or more of the following legal bases.

Legitimate interests

Including InVault’s interests in operating and securing its corporate website, responding to legitimate business communications, managing professional and commercial relationships, preventing abuse, maintaining appropriate business records and protecting InVault’s legal rights.

Steps requested before entering into a contract or performance of a contract

Where you contact us regarding a potential or existing business relationship or request that we take steps in connection with such a relationship.

Compliance with legal obligations

Where processing is necessary to comply with an applicable legal requirement.

Consent

Where applicable and where we specifically request consent for a particular purpose.

Where processing is based on consent, you may withdraw that consent at any time, subject to applicable law. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Hosting, security and infrastructure

The Site uses Cloudflare for website delivery, security, DNS and related infrastructure.

When visitors access the Site, Cloudflare may process technical information such as IP addresses, routing information, system configuration information and traffic information for purposes including content delivery, security, traffic management and protection against malicious activity.

Depending on the Cloudflare services and security features enabled for the Site, Cloudflare may set strictly necessary cookies or use similar technologies for functions such as security, traffic management, rate limiting, bot detection and challenge verification.

InVault does not use these technologies for behavioral advertising.

Cloudflare processes information subject to its own applicable contractual, legal and privacy obligations.

5. Google Fonts

The Site currently uses Google Fonts to provide the Inter typeface.

Loading these resources requires your browser to connect to Google-operated infrastructure, which may result in technical request information being processed by Google under its own privacy practices.

InVault does not use Google Fonts for advertising or behavioral profiling.

6. Cookies and similar technologies

As currently configured, the Site does not use advertising cookies, remarketing cookies, behavioral-advertising technology or third-party marketing pixels.

We also do not currently operate Google Analytics, Meta Pixel or similar behavioral analytics services on this corporate Site.

Cloudflare may use strictly necessary cookies or similar technologies in connection with website security, traffic management, rate limiting, bot detection, challenge verification or other network functionality.

If we materially change our use of cookies, analytics, advertising or tracking technologies, we will update this Privacy Policy and implement any additional notice or consent mechanisms required by applicable law before those practices are introduced.

7. How we disclose information

We do not sell personal information.

We may disclose limited personal information where reasonably necessary to the following categories of recipients.

Infrastructure and technology providers

Such as hosting, DNS, security, website-delivery and technical service providers.

Communications providers

Such as email, telecommunications and messaging services used to receive or respond to communications.

Professional advisers

Such as accountants, lawyers, auditors or other professional advisers where reasonably necessary.

Government authorities and legal recipients

Where disclosure is required by applicable law, lawful legal process, court order or valid governmental request.

Corporate transaction participants

If InVault becomes involved in a genuine merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, subject to applicable confidentiality and legal requirements.

Service providers process information subject to their applicable contractual, legal and privacy obligations. Where required by applicable law, InVault uses appropriate data-processing or other contractual arrangements.

8. No sale, targeted advertising or behavioral advertising

InVault does not sell personal information obtained through this Site.

We do not currently share personal information obtained through this Site for cross-context behavioral advertising, targeted advertising or similar profiling purposes.

We do not derive revenue from selling visitor information.

Because the Site does not currently engage in these practices, it does not presently provide a separate “Do Not Sell or Share My Personal Information” mechanism.

If our practices materially change, this Privacy Policy and any legally required opt-out mechanisms will be updated before those practices are introduced.

9. Third-party websites and communication services

The Site may contain links to independent third-party websites or services, including:

• invault.co;
• WhatsApp;
• Telegram;
• social-media platforms; and
• other external websites or services.

When you leave invaulthq.com or choose to communicate through a third-party service, that third party may collect or process information under its own privacy policy and terms.

InVault does not control the privacy, security or data-processing practices of independent third-party services.

10. International processing

InVault LLC is established in the United States and operates internationally.

Personal information may therefore be processed in the United States or in other countries in which InVault or its service providers operate.

Different jurisdictions may provide different levels of legal protection for personal information.

Where applicable law requires a particular mechanism for international transfers of personal information, InVault will use an appropriate lawful transfer mechanism or other safeguards available under applicable law.

11. Data retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, taking into account the nature of the information, the relevant business relationship and any legal, accounting, security or dispute-resolution requirements.

Routine inquiries and correspondence may be retained while an inquiry or business relationship remains active and for a reasonable period afterward where necessary for business records, continuity or follow-up.

Technical and security data may be retained for periods determined by legitimate operational requirements and the settings or retention practices of our infrastructure providers.

Information may be retained for longer where reasonably necessary to:

• comply with applicable law;
• preserve appropriate business records;
• establish, exercise or defend legal rights;
• resolve disputes;
• prevent fraud or abuse; or
• protect the security of InVault, its systems or others.

When information is no longer reasonably required, we may delete, anonymize or securely archive it as appropriate.

12. Security

We use reasonable administrative, technical and organizational measures intended to protect personal information against unauthorized access, disclosure, alteration, loss or misuse.

These measures may include secure hosting infrastructure, access controls, network-security services and appropriate internal information-handling practices.

No internet transmission, website, communications service or storage system can be guaranteed to be completely secure. Visitors should therefore use reasonable care when transmitting information electronically.

13. Your privacy rights

Depending on your location and applicable law, you may have rights concerning your personal information.

These may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information;
• request restriction of certain processing;
• object to certain processing;
• request portability of information where applicable;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable data-protection authority.

Certain rights may be subject to legal exceptions, verification requirements or limitations.

Even where a particular statutory privacy regime does not apply, you may contact us with a reasonable request concerning personal information you have provided to InVault, and we will review and handle the request appropriately.

To make a privacy request, email contact@invaulthq.com.

Please include enough information for us to understand and appropriately verify your request. Do not send unnecessary identification documents unless we specifically request them for verification.

EU and UK complaints

Where EU or UK data-protection law applies, you may also have the right to lodge a complaint with the competent supervisory authority in the country where you live, work or believe an infringement occurred.

Individuals in the United Kingdom may contact the UK Information Commissioner's Office.

You may contact InVault first if you would like us to review or attempt to resolve a concern directly.

14. Children

The Site is intended for corporate, professional and general business audiences and is not directed toward children.

InVault does not knowingly collect personal information from children through this corporate Site.

If you believe that a child has provided personal information to us inappropriately, contact contact@invaulthq.com so that we can review the matter and take appropriate action.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our website, technology, business practices, service providers or legal obligations change.

When we make a material update, we will publish the revised Privacy Policy on this Site and update the effective or revision date.

Visitors should review the current version periodically.

16. Contact

Questions, requests or concerns regarding this Privacy Policy or InVault's handling of personal information may be directed to:

Email: contact@invaulthq.com
Corporate phone: +1 307 999 4609
Website: invaulthq.com