1. Introduction

Kitnetic Solutions Ltd (“we”, “us”, “our”) operates VaultAI (vaultai.tech). This policy describes how we collect, use, and protect your information.

2. Information We Collect

Account Information

• Email address, name (for account creation)
• Password (hashed, never stored in plain text)

Billing Information

• Payment details — we accept Visa and Mastercard; we do not store credit card numbers
• Transaction history and prepaid balance

Usage Data

• Vault creation, start, stop, and destroy events
• Compute usage duration and costs
• Feature usage (document count, message count)
• IP address and user agent (for audit logging)

What We Do NOT Collect

• Document content — your files are processed entirely on your dedicated GPU instance
• Chat messages — conversations happen between your browser and your GPU instance
• Document embeddings or vector indices — stored only in volatile memory on your instance

3. How We Use Your Information

• To provide and maintain the service
• To process payments and track usage
• To generate audit logs for your compliance needs
• To send transactional emails (account, billing)
• To improve the service (aggregate, anonymized usage patterns)

4. Data Storage & Security

• Account and billing data stored in encrypted databases
• Document data stored only on your dedicated GPU instance
• Data region: GPU vault instances are provisioned only in North America, the UK/EU/EEA, or Australia (we do not provision vault infrastructure outside this fixed list of regions); account and billing data is stored with our infrastructure providers under the same encryption and access controls regardless of region
• When you destroy a vault, all data on the GPU instance is permanently deleted
• We use TLS 1.3 for all data in transit

5. Third Parties

We use third-party service providers for payment processing, infrastructure hosting, and application delivery. These providers do not have access to your document content. We do not sell your data to third parties. We do not use your data for advertising.

6. Your Rights

• Access & Export: Download a copy of the account, billing, and usage data we hold about you at any time from Settings → Privacy & Data, or by contacting us
• Correction: Update your profile directly in Settings, or request correction of other inaccurate data by contacting us
• Deletion: Permanently delete your account and personal data at any time from Settings → Privacy & Data, or by contacting us. Vaults are destroyed and account information is anonymized immediately; billing records are retained only as described in Data Retention below

You can also exercise any of these rights by contacting us at hello@vaultai.tech.

7. Cookies

We use minimal cookies:

• Session cookies for authentication
• No third-party tracking cookies
• No advertising cookies

8. Data Retention

• Account data: retained while your account is active; when you delete your account, your name, email, and other personal identifiers are anonymized immediately
• Billing records: retained for 7 years (legal and accounting requirements)
• Audit logs: retained for 1 year, then automatically deleted
• Vault data: deleted immediately when you destroy a vault

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email.

10. Contact