Privacy Policy
Last updated: March 2026
1. Who we are
VipWorkVault ('we', 'us', 'our') operates the VipWorkVault platform at vipworkvault.com. We are the data controller for personal data collected through our service. For data protection queries, contact us at vipworkvault@gmail.com.
2. What data we collect
We collect account data (name, email, password hashed), usage data (tools used, frequency), payment data (processed by Stripe — we never store card numbers), technical data (IP address, browser type, cookies), and procurement data you enter into the Procurement Engine.
3. How we use your data
We use your personal data to provide and maintain the service, process your subscription and payments, send transactional emails, improve features using anonymised aggregated data, comply with legal obligations, and respond to support requests.
4. Our data promise
Uploaded files are deleted immediately after processing. Your inputs and outputs are never used to train AI models. We do not sell your data to third parties. We do not use your data for advertising purposes.
5. Legal basis for processing
We process your data under: Contract (to provide the service), Legitimate interests (improving service, security, fraud prevention), Legal obligation (compliance with applicable laws), and Consent (marketing emails where you've opted in).
6. Data retention
We retain your account data while your account is active. If you delete your account, we delete your personal data within 30 days, except where required for legal or tax purposes. Uploaded files are deleted immediately after processing.
7. Third-party services
We use Supabase (database, EU data centres), Anthropic (AI processing, inputs sent for processing not retained), Vercel (hosting), and Stripe (payment processing, PCI DSS compliant). All sub-processors are GDPR compliant.
8. Your rights under UK GDPR
You have rights to: access your personal data, rectification of inaccurate data, erasure (right to be forgotten), restriction of processing, data portability, object to processing, and withdraw consent. Email vipworkvault@gmail.com to exercise any right. We respond within 30 days.
9. Cookies
We use essential cookies only — for authentication and session management. We do not use advertising or tracking cookies.
10. Contact and complaints
For privacy queries: vipworkvault@gmail.com. If unhappy with how we handle your data, you have the right to lodge a complaint with the ICO at ico.org.uk.