1. Introduction

Kitnetic Solutions Ltd (“we”, “us”, “our”) operates VaultAI (vaultai.tech). This policy describes how we collect, use, and protect your information.

2. Information We Collect

Account Information

• Email address, name (for account creation)
• Password (hashed, never stored in plain text)

Billing Information

• Payment details — we accept Visa and Mastercard; we do not store credit card numbers
• Transaction history and prepaid balance

Usage Data

• Vault creation, start, stop, and destroy events
• Compute usage duration and costs
• Feature usage (document count, message count)
• IP address and user agent (for audit logging)

What We Do NOT Collect

• Document content — your files are processed entirely on your dedicated GPU instance
• Chat messages — conversations happen between your browser and your GPU instance
• Document embeddings or vector indices — stored only in volatile memory on your instance

3. How We Use Your Information

• To provide and maintain the service
• To process payments and track usage
• To generate audit logs for your compliance needs
• To send transactional emails (account, billing)
• To improve the service (aggregate, anonymized usage patterns)

4. Data Storage & Security

• Account and billing data stored in encrypted databases
• Document data stored only on your dedicated GPU instance
• When you destroy a vault, all data on the GPU instance is permanently deleted
• We use TLS 1.3 for all data in transit

5. Third Parties

We use third-party service providers for payment processing, infrastructure hosting, and application delivery. These providers do not have access to your document content. We do not sell your data to third parties. We do not use your data for advertising.

6. Your Rights

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Export: Download your audit logs and billing history

To exercise these rights, contact us at hello@vaultai.tech.

7. Cookies

We use minimal cookies:

• Session cookies for authentication
• No third-party tracking cookies
• No advertising cookies

8. Data Retention

• Account data: retained while your account is active
• Billing records: retained for 7 years (legal/tax requirements)
• Audit logs: retained for 1 year, then automatically deleted
• Vault data: deleted immediately when you destroy a vault

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email.

10. Contact