Privacy Policy

1. Who Controls Your Data

When you create a Vault account, DnZ Applications Ltd. acts as the Data Controller for your personal account information. If you use Vault as part of a company workspace, your employer or the company that invited you may also act as the Data Controller for information they create or upload within their workspace. In those cases, Vault processes that information on their behalf.

2. Information We Collect

Account Information

When you register for Vault, we may collect:

• Full name
• Email address
• Telephone number (optional)
• Password (stored securely in encrypted form)
• Company name
• Job title
• Profile photograph (optional)
• Login history
• Device and browser information
• Last login time

Company Information

If you create or manage a company within Vault, we may collect:

• Company name
• Business address
• VAT number (optional)
• Company registration number (optional)
• Company logo
• Contact details
• Subscription information

Project Information

When using Vault's project management tools, we may collect:

• Project names
• Project addresses
• Task lists
• Progress updates
• Notes
• Project documents
• Drawings
• Site photographs
• Files uploaded by authorised users

Labour Marketplace Information

If you use Vault to find work or recruit workers, we may collect:

• Trade
• Skills
• Qualifications
• Experience
• Availability
• Preferred working locations
• Employment preferences
• Public profile information
• Reviews and ratings

Qualifications & Certifications

You may choose to upload:

• CSCS cards
• CPCS cards
• NPORS cards
• IPAF licences
• PASMA certificates
• Driving licences
• Trade qualifications
• Health & Safety certificates
• Other industry certifications

These documents are only visible to authorised users based on your privacy settings and company permissions.

Photos & Documents

You may upload:

• Site photographs
• Progress photos
• Certificates
• Drawings
• PDFs
• Risk assessments
• Method statements
• Quotes
• Invoices
• Other project documents

These files remain associated with your company workspace unless deleted.

Messaging

If you use Vault Messaging we process:

• Messages
• Images
• Documents
• Project conversations
• Delivery status

Messages are stored securely to provide the service.

Accounting Integrations

If you choose to connect:

• QuickBooks
• Xero

Vault stores encrypted authentication tokens required to communicate with those services. We do not store your accounting passwords. Vault only accesses the information necessary to provide the features you authorise.

Payment Information

Subscription payments are processed securely either by Stripe or, for subscriptions purchased in the app, by Apple's App Store or Google's Play Store via RevenueCat. Vault does not store your debit or credit card details in any case. These providers share limited billing information with Vault including:

• Customer/subscriber ID
• Subscription status
• Payment status

Stripe's, Apple's, Google's and RevenueCat's processing of this information is governed by their own respective Privacy Policies.

3. Why We Collect Your Information

We use your information to:

• Create your account
• Provide Vault services
• Manage projects
• Connect companies and tradespeople
• Process subscriptions
• Authenticate users
• Improve platform security
• Provide customer support
• Send important service updates
• Comply with legal obligations

4. Lawful Basis

Where required by UK GDPR, Vault relies on:

• Performance of a contract
• Legitimate interests
• Legal obligations
• Consent (where required)

For example, we request consent before accessing your camera or photo library.

5. Camera, Photos & Files

If you choose to upload photographs or documents, Vault will request permission from your device. We only access the files you choose to upload. We do not access your entire photo library. We do not use facial recognition technology.

6. Notifications

If enabled, Vault may send notifications about:

• Project updates
• Task assignments
• Messages
• Labour requests
• Quote updates
• Invoice updates
• Subscription notifications

Notification permissions can be changed within your device settings.

7. Who We Share Information With

We only share information where necessary to provide Vault. This may include trusted providers such as:

• Stripe (payments)
• RevenueCat, Apple App Store & Google Play (in-app subscription payments)
• Microsoft 365 (if connected)
• QuickBooks
• Xero
• Cloud hosting providers
• File storage providers
• Email delivery providers

We never sell your personal information. We never sell company information.

8. International Transfers

Where information is processed outside the UK, Vault uses appropriate safeguards in accordance with UK GDPR.

9. Data Retention

We keep your information for as long as your account remains active. If your account is deleted:

• Personal information is removed where legally possible.
• Some financial records may be retained where required by law.
• Security logs may be retained for fraud prevention.

10. Your Rights

Depending on your location, you may have the right to:

• Access your information
• Correct inaccurate information
• Delete your information
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent

Requests can be made by contacting privacy@vault-app.co.uk.

11. Security

Vault takes security seriously. We use measures including:

• Encrypted connections (HTTPS)
• Encrypted authentication tokens
• Secure password hashing
• Role-based permissions
• Secure cloud infrastructure
• Audit logging
• Regular security monitoring

No online service can guarantee absolute security, but we continually work to protect your information.

12. Children's Privacy

Vault is intended for construction professionals and businesses. It is not designed for users under the age of 16.

13. Changes to this Policy

We may update this Privacy Policy from time to time. Where changes are significant, we will notify users through the Vault platform or by email where appropriate.

14. Contact

For privacy enquiries, data requests or security concerns, please contact: DnZ Applications Ltd. Email: privacy@vault-app.co.uk