Privacy policy
Effective 09-NOV-2026. Vaultedo is a solution provided by OPNYX SOLUTIONS, the data controller for this service.
What Vaultedo is
Vaultedo protects a web app from being copied. A customer installs it in their own app; the app's visitors are the customer's users, not ours. For them, the customer is the controller and we process on the customer's instructions.
What we keep, and for how long
| Data | Why | Kept |
|---|---|---|
| Your account: email, name, the sign-in provider you used | To sign you in and to reach you about your organisation | While the organisation exists |
| Your organisation: name, apps, their addresses, settings, audit log | To run the service and to show who changed what | While the organisation exists; deleted on request within 30 days |
| Events from a protected app: the kind of attempt, page, time, browser, screen size, a device fingerprint, the signed-in name the app gives us, the network address | To show the customer what happened and to alert them | 90 days by default (the customer may set 30 to 400); network addresses are shortened to their first three parts after 30 days |
| Sessions: when you signed in, from which address and browser | So you can see and end them | 12 hours, then gone |
| Payment records | Billing | As the law requires; card details never reach us (Paddle holds them) |
Who else sees it
- Firebase (Google) handles sign-in with Google, Microsoft or an email. It sees your email and the provider; we verify its proof on our server.
- Paddle is the merchant of record for payments.
- Nobody else. The website and the console make no third-party calls: no analytics, no fonts from a font service, no trackers.
Where
Our servers are in one region today, and the status page says so. Customers who need the data to stay in their own cloud choose the Own cloud pack.
Your rights
Export or delete your organisation's data from Settings, or write to reachout@opnyx.com. We answer within 30 days.