Privacy policy | Vaultelix

Effective and last updated September 28, 2026

This Privacy Policy describes how Vaultelix (“Vaultelix,” “we,” “us,” or “our”) collects, uses, discloses, transfers and stores personal information when you visit vaultelix.com (the “Website”), submit the contact form on the Website, or correspond with us by email. It also describes the choices available to you and how you can exercise your privacy rights.

Certain countries and states, such as those in the European Union, the United Kingdom and the state of California, have enacted specific data protection and privacy laws for their residents (“Privacy Laws”). Some of these rules overlap, and some don’t. To keep this Privacy Policy as understandable as possible, the sections below apply to everyone, and we note where a Privacy Law gives residents of a particular place additional information or rights.

Summary

Vaultelix is committed to protecting your personal information. In short:

You can browse the Website without telling us who you are.
The Website does not use cookies, advertising trackers or cross-site tracking technology.
We collect personal information from you only when you choose to send it to us, through the contact form or by email, and we use it to respond to you.
We do not sell, rent or lease your personal information, and we do not share it for advertising.
You may ask us to access, correct or delete your personal information at any time.

Who we are and what this policy covers

Vaultelix provides a managed backup service for files stored in cloud services such as Google Drive, Dropbox, Microsoft OneDrive and Box. You can contact us as described in How to contact us.

Under European Union and United Kingdom data protection law, commonly known as the GDPR and the UK GDPR, Vaultelix is the controller of the personal information described in this Privacy Policy.

This Privacy Policy applies only to the Website, the contact form, and email correspondence with us about our services. It does not apply to the Vaultelix backup service itself or to files backed up through it. If you become a customer, we will provide you with separate information about how we process personal information as part of that service.

The personal information we collect

“Personal information” means information that identifies, relates to, or could reasonably be linked with you. We collect the following categories of personal information.

Personal information you provide to us

Contact form. If you request information about our services through the contact form, we ask you to provide the following. Only your name, email address and message are required.

Information	Purpose
Name and email address	To identify you and respond to your enquiry.
Company name (optional)	To understand the organization your enquiry relates to.
Who the backup is for, which cloud services hold your files, and the approximate amount of data	To tell you how setup and pricing would apply to you.
Your message	To respond to your request or question.

Email. If you email us directly, we receive your email address, your name as it appears in your email, and any other information you choose to include. We handle it in the same way as a contact form submission.

Sensitive personal information. We do not ask for sensitive personal information, and we ask that you do not send it to us. Please do not include passwords, access keys, account credentials, financial account details, government identification numbers, or health information in the contact form or in email. We do not need them to respond to an enquiry.

Personal information we collect automatically

Log and device information. When you visit the Website, we and our service providers automatically receive certain information from your browser or device, including your Internet Protocol (IP) address, the date and time of each request, the page requested, the referring page, and your browser and operating system type. Collecting this information enables us to deliver the Website to you, diagnose technical problems, and protect the Website and the contact form from abuse such as automated spam.

How you found the Website. On the first page you visit, your browser records the name of the website that referred you (the site name only, not the full address), the page on which you arrived, and any campaign tags in the link you followed, such as utm_source. This information is kept in your browser’s session storage and is deleted by your browser when you close the tab. It is sent to us only if you submit the contact form, together with your enquiry. If you do not submit the form, it never leaves your browser.

Personal information we collect from third parties

We do not purchase or otherwise obtain personal information about you from data brokers or other third parties.

Categories under California law

Using the categories defined by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”), in the preceding 12 months we have collected: identifiers (such as your name, email address and IP address); professional information (such as your company name); internet or other electronic network activity information (such as the pages you request and the website that referred you); and the contents of messages you send us. We collect this information directly from you and automatically from your browser or device, for the purposes described in this Privacy Policy.

How we use your personal information

We use the personal information we collect for the following purposes:

to respond to your enquiries and requests, and to provide the information you have asked us for;
to communicate with you about the services you have enquired about;
to understand which websites, links and campaigns bring visitors to the Website;
to provide, operate, maintain and improve the Website;
to identify server problems and other technical or network issues;
to prevent abuse of the Website and the contact form, and to detect and prevent unauthorized access and other illegal activity; and
to comply with our legal obligations, and to establish, exercise or defend legal claims.

We will only process personal information in ways that are compatible with the purpose for which we collected it, or for purposes you later authorize. We do not use your personal information for automated decision-making or profiling.

Email communications

If you contact us, we will reply to you by email about your enquiry. We will not add you to a mailing list or send you marketing communications because you contacted us. If we ever wish to send you marketing communications, we will ask for your consent first. If you no longer wish to receive emails from us, tell us and we will stop.

Legal bases for processing (EEA and UK)

If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:

Steps prior to entering into a contract, when we respond to your enquiry about our services at your request;
Our legitimate interests in responding to enquiries, understanding which of our outreach is effective, and keeping the Website secure and available, where those interests are not overridden by your rights and interests;
Compliance with a legal obligation, where the law requires us to retain or disclose information; and
Your consent, where we ask for it, which you may withdraw at any time.

Cookies and similar tracking technology

The Website does not use cookies. The only information the Website stores in your browser is the session record of how you found the Website, described in The personal information we collect.

The Website does not use analytics or advertising services.

Vaultelix will not sell, rent or lease your personal information to others. We do not sell your personal information or share it for cross-context behavioral advertising, as those terms are defined in the CCPA, and we have not done so in the preceding 12 months. We share and disclose your personal information only in the limited circumstances described below.

Service providers. We use a small number of third-party service providers who require access to your personal information to provide their services to us:

Cloudflare, which delivers and protects the Website. All requests to the Website, including contact form submissions, pass through its network. Please see Cloudflare’s privacy policy.
Our hosting provider, which operates the server on which the Website runs.
Our email delivery provider, which delivers contact form submissions to our mailbox.
Our email provider, which hosts the mailbox in which your enquiry and our replies are kept.

We make commercially reasonable efforts to ensure that our service providers protect your personal information consistently with this Privacy Policy, and we do not allow them to use it for any purpose other than providing their services to us. You may ask us for the names of the service providers described above by contacting us.

Legal requirements and protection of rights. We may also disclose your personal information to third parties: (a) where required by law or regulation, court order, or other legal process; (b) in response to lawful requests by public authorities, including to meet national security or law enforcement requirements; (c) in connection with a sale, transfer, merger, bankruptcy, restructuring, or other reorganization of our business; (d) to protect or defend our rights, interests or property, or those of third parties; (e) to investigate wrongdoing in connection with the Website; and (f) to protect the vital interests of an individual.

International data transfers

Our service providers operate in several countries, including the United States. As a result, it is sometimes necessary for your personal information to be transferred to, stored in, and processed in places outside your home country or region. Where we do so, we will ensure that the transfer complies with applicable data protection laws, including, where required, by relying on appropriate safeguards such as the European Commission’s standard contractual clauses and the UK International Data Transfer Addendum.

Data retention

We retain your personal information for the period necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

Enquiries and correspondence are retained while we are responding to your enquiry, and for up to two years afterward so that we have context if you contact us again. If you become a customer, the correspondence becomes part of your customer records. You may ask us to delete it sooner at any time.
Copies held by our email delivery provider are retained for a limited period set by that provider and then deleted automatically.
Log information, including IP addresses, is retained in our server logs for no more than 30 days and then deleted automatically. Cloudflare retains its own records for the periods described in its privacy policy.
The session record of how you found the Website is deleted by your browser when you close the tab.

We may retain some personal information for longer where necessary for security, fraud and abuse prevention, to comply with legal or regulatory requirements, or to establish, exercise or defend legal claims. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it.

How we protect your information

We use appropriate technical and organizational security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration and destruction, both during transmission and once we receive it. All pages of the Website and all contact form submissions are encrypted in transit using HTTPS. Contact form submissions are not stored on the Website’s server; they are delivered to our mailbox, and access to that mailbox is limited to Vaultelix personnel who respond to enquiries.

However, no method of transmission over the Internet, or method of electronic storage, is 100% secure, and we cannot guarantee the absolute security of your personal information. In the event of unauthorized access to your personal information, we will respond and notify you and the relevant authorities as required by applicable law.

Your privacy rights and choices

Certain countries and states have enacted data protection and privacy rights for their residents. We strive to respect these rights for everyone who contacts us, wherever they are located. These rights are not absolute and are subject to exceptions provided by applicable law, which may not be fully listed below.

Right to know and access

You may request that we disclose what personal information we have collected, used or disclosed about you, and why. Specifically, you may request:

the categories of personal information we have collected about you;
the specific pieces of personal information we have collected about you;
the categories of sources from which we collected it;
the purposes for which we use it; and
the categories of third parties to whom we have disclosed it.

Right to correct

You may request that we correct personal information about you that is inaccurate or incomplete.

Right to delete

You may request that we delete the personal information we have collected about you. We will also ask our service providers to delete it, where applicable. We may retain personal information where it is necessary to:

complete a transaction or provide a service you have requested;
detect and prevent security incidents, malicious, fraudulent or illegal activity;
identify and repair errors that impair intended functionality;
comply with a legal obligation; or
establish, exercise or defend legal claims.

Right to data portability

You may request a copy of the personal information you have provided to us in a structured, commonly used and machine-readable format, where applicable and technically feasible.

Right to object, restrict processing, and withdraw consent

You may object to, or ask us to restrict, our processing of your personal information, including processing based on our legitimate interests. Where we process your personal information based on your consent, you may withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal, or processing carried out on other lawful grounds.

Right to opt out of sale or sharing, and to limit use of sensitive personal information

We do not sell or share personal information, and we do not use sensitive personal information for purposes that require an opt-out under the CCPA. If you send us sensitive personal information, we will use it only to respond to you. You may nonetheless contact us at any time to confirm or restrict how we use your information.

Right to non-discrimination

We will not discriminate or retaliate against you for exercising any of your privacy rights, including by denying you services, charging you different prices or rates, or providing you a different level or quality of service.

Right to lodge a complaint

If you are located in the European Economic Area or the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or, in the United Kingdom, the Information Commissioner’s Office.

How to submit a request

To exercise any of these rights, email us at [email protected]. We will need to verify your identity before we act on your request, which will normally mean confirming that you control the email address the request concerns. Where permitted by applicable law, you may use an authorized agent to submit a request on your behalf; we may require proof that the agent is authorized.

We will endeavor to respond as soon as possible, and in any event within one month of receipt, or within 45 days where a US state Privacy Law applies. We may extend this period where permitted by law, taking into account the complexity and number of requests, in which case we will tell you. If we are unable to comply with all or part of your request, we will tell you why.

Children’s privacy

The Website is intended for businesses and adults and is not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

Links to other websites

The Website contains links to websites operated by other companies. We are not responsible for the privacy practices of those websites, and we encourage you to read their privacy notices when you leave the Website. This Privacy Policy applies solely to information collected by Vaultelix.

Do Not Track and Global Privacy Control

Some browsers let you signal that you do not want your browsing activity to be tracked, through Do Not Track or Global Privacy Control. The Website does not track visitors over time or across third-party websites, and we do not sell or share personal information, so the Website operates the same way whether or not your browser sends these signals.

Changes to this Privacy Policy

We review this Privacy Policy at least once a year, and we update it when required in response to changing legal, technical or business developments. When we update it, we will post the revised version on this page and change the “last updated” date at the top. If we make a material change that affects personal information you have already provided to us, we will notify you by email before the change takes effect.

How to contact us

If you have any questions or concerns about this Privacy Policy, or about the collection, use or disclosure of your personal information, or if you would like to submit a privacy request, please contact us by email at [email protected].