StorVault — Self-Storage Management Platform

1. Introduction

StorVault ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our self-storage management platform and related services. By using StorVault, you agree to the practices described in this policy.

2. What Information We Collect

Account information: name, email address, phone number, and business details provided during registration or onboarding.
Billing information: payment card details and billing address, processed securely via Stripe. We do not store raw card numbers.
Usage data: pages visited, features used, session duration, IP address, browser type, and device identifiers.
Communications: messages you send us via support channels or in-app messaging.
Tenant data: information about your customers (tenants) that you input into the platform as part of managing your storage facility.
Analytics data: collected via Google Analytics to understand platform usage patterns.

3. How We Use Your Information

To create and manage your StorVault account and subscription.
To process payments and send invoices via Stripe.
To deliver platform features including lease management, automated billing, and reporting.
To send transactional emails (confirmations, receipts, renewal notices) via Resend.
To provide customer support and respond to your inquiries.
To improve our platform through analytics and usage monitoring.
To comply with legal obligations and enforce our Terms of Service.
To detect and prevent fraud and security incidents.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze platform usage. Essential cookies are required for authentication and functionality. Analytics cookies (Google Analytics) help us understand how the platform is used. You can manage cookie preferences through our preference center or your browser settings. For full details, see our Cookie Policy.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases: (a) Contract performance — to provide the services you have subscribed to; (b) Legitimate interests — to improve our platform and prevent fraud; (c) Legal obligation — to comply with applicable laws; (d) Consent — where you have explicitly opted in (e.g., analytics, marketing).

6. Data Sharing & Third Parties

Stripe — payment processing. Your payment data is subject to Stripe's Privacy Policy.
Supabase — database and authentication infrastructure.
Resend — transactional email delivery.
Google Analytics — anonymised usage analytics.
OpenAI — server-side AI processing for platform features.
We do not sell your personal data to third parties.
We may disclose data if required by law, court order, or to protect our legal rights.

7. Data Retention

We retain your account data for as long as your subscription is active. After account closure, we retain data for up to 7 years to comply with financial and legal record-keeping obligations. Tenant data you have entered can be exported or deleted upon request. Consent records are retained in localStorage until cleared by the user.

8. Your Rights

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your data, subject to legal retention requirements.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests.
Right to restrict processing — request that we limit how we use your data.
Right to withdraw consent — withdraw consent for optional processing at any time.
To exercise any of these rights, contact us at privacy@stor-vault.com.

9. Do Not Sell My Personal Information

Under the California Consumer Privacy Act (CCPA) and similar state laws, you have the right to opt-out of the "sale" or "sharing" of your personal information. StorVault does not sell your personal information to third parties for monetary consideration. However, we may share certain data with service providers for business purposes. If you wish to exercise your rights under CCPA or similar state laws, please contact us at privacy@stor-vault.com with your request. We will respond within 45 days.

10. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, role-based access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. We encourage you to use strong passwords and keep your account credentials confidential.

11. International Transfers

Your data may be processed in countries outside your own, including the United States. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) in accordance with GDPR requirements.

12. Children's Privacy

StorVault is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately at privacy@stor-vault.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via an in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.

14. Contact Us

For privacy-related questions, requests, or complaints, contact our Data Protection team at: StorVault Email: privacy@stor-vault.com Website: https://storvault5596.builtwithrocket.new