Privacy Policy
Vaulcrypt Software Pvt. Ltd. ("Vaulcrypt," "we," "us") builds an AI-native financial intelligence platform for business customers ("Company," "you"). This policy explains what personal data we process through our website and product (the "Service"), why, and the choices you have. It's not directed at consumers — Vaulcrypt is built for business use.
1. Scope
This policy covers data we process as a controller — deciding why and how it's processed — such as website visitors, prospects, and the people who administer a Company's Vaulcrypt account. Where we process a Company's financial data to provide the Service, we do so on that Company's instructions under our Terms of Service, not this policy; if you have a question about data in a Company's account, start with that Company's own administrators.
2. Personal data we process
2.1 Information you provide directly.
When you request a demo, ask a question, or otherwise contact us, we collect what you submit — typically your name, work email, company, and the message or intent you select. If you become a customer, we collect account and administrator information needed to set up and run the Service.
2.2 Information from your use of the Service.
Once the Service is in use, this includes the invoices, transactions, vendor and payee records, policies, and history you connect through your accounting or ERP system ("Company Data," which may include personal data about employees, vendors, or counterparties), along with product-use and login data.
2.3 Information collected automatically.
Our website uses Vercel Analytics and Speed Insights to understand aggregate traffic and performance. These are privacy-friendly by design — they don't use tracking cookies and don't build a profile of you across other sites.
2.4 Information from your integrations.
When you connect an accounting or ERP system (for example QuickBooks, Xero, NetSuite, or Sage Intacct), we receive the data needed to provide the Service, for as long as that connection stays authorized.
3. How we use it
To provide and operate the Service — reading, matching, coding, and flagging your financial documents, and preparing the work your team reviews. To secure accounts and detect fraud, abuse, or security incidents. To respond when you contact us, and to send account and, where you've agreed, product updates. To improve the Service. We don't use your financial data to train models for other customers, and we don't sell it.
4. How we disclose it
With the integrations you or your Company authorize, so the Service can function. With infrastructure and service providers (for example hosting, model, and analytics providers) who process data on our behalf, under contract, only as needed to run the Service. When required by law or legal process, or to protect the rights, security, or safety of Vaulcrypt, our users, or others. In connection with a merger, financing, or acquisition. With your consent. We don't sell personal data, and we don't share it with third parties for cross-context behavioral advertising.
5. AI and automated processing
The Service uses AI to read, match, code, and flag your financial documents. It prepares work for your review — it does not make a decision with legal or similarly significant effect on its own, and it does not move money or take an irreversible action unless a human on your team approves that specific action.
6. Your rights and choices
Subject to applicable law, you can ask to access, correct, export, or delete personal data we hold about you by contacting us below; we may need to verify your identity first. You can opt out of non-essential emails at any time using the link in those emails. If you're a California resident: we don't sell or share personal data as those terms are defined under California law, and you have the rights above with respect to your personal data.
7. International transfers
We're based in India and host the Service on infrastructure that may process and store data in other countries. Where required by law, we use appropriate safeguards for those transfers.
8. Security
We use encryption in transit and at rest, access controls, and monitoring designed to protect your data. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security. If you suspect a security incident involving your account, contact us immediately.
9. Retention
We keep personal data for as long as the related account or relationship is active, plus a limited period after to allow export, resolve disputes, and meet legal or accounting obligations, after which it's deleted or anonymized.
10. Children's privacy
The Service is intended for business use and isn't directed at children. We don't knowingly collect personal data from children under 13.
11. Changes to this policy
We may update this policy as the Service evolves. We'll post the revised version here with a new "last updated" date, and for material changes we'll make a reasonable effort to notify account owners directly before they take effect.
12. Contact us
Questions about this policy or your data? Reach us at info@vaulcrypt.com.