Trust

Your privacy, in plain English.

Plain-English summary of what Vaulto collects, how we use it, and the control you keep. Pairs with our security overview.

Last updated June 2026 · A full legal policy is published before public launch.

What we collect

The information you choose to put into your vault (assets, liabilities, documents, and related details), the account details needed to sign you in, and basic usage data needed to run and improve the service.

How we use it

To provide the product: store your inventory and documents, calculate your net worth, generate the AI overviews you request, and produce the exports you ask for. We do not sell your data.

AI processing & third parties

To power our AI features — the asset photo scan-and-fill, automated valuations, the spoken walkthrough, and the advisory overview, report and chat — we send the information those features need to OpenAI, L.L.C., which runs the AI models on our behalf as our data processor under an executed Data Processing Addendum (DPA). Depending on the feature this can include the photos you capture (which may show document details such as account or policy numbers and addresses), the asset names, categories, currencies and values in your vault, the answers and free-text notes you provide in the advisory flow (which may include sensitive personal or family circumstances), your country, and the text read aloud by the voice walkthrough. OpenAI processes this only to return results to us and does not use it to train its models. We instruct OpenAI not to retain our requests and responses (store=false); absent a zero-retention arrangement, OpenAI may keep the data for up to 30 days solely for abuse monitoring before deleting it. We do not sell this information or share it with any other third party for AI processing.

Sharing & consent

Vaulto doesn't share your vault with anyone on your behalf. What you control is this: you can invite someone into a capture session to help you add items — you choose their role, and you can remove them when you're done. Separately, you can export your own records and files and pass them to a professional yourself. An export is a file you hand over, so once you've shared it, it's out of the vault's control.

How it's protected

Your records and uploaded files are encrypted at rest. On top of that, Vaulto seals the sensitive parts again inside the app itself — item names, descriptions, locations and notes, the photos and scans you upload, and exact valuations — with keys managed in Google Cloud KMS. Each person's vault is isolated from other users, and passwords are scrypt-hashed. See the security overview for specifics — including which fields stay readable and what we don't yet claim.

Your choices

• Access and export the information in your vault.
• Remove someone you invited to a capture session.
• Request deletion of your account and data — see how to delete your account.

Contact

Questions about privacy? Email privacy@myvaulto.com.