Privacy Policy

At ReVault, we respect your privacy and are committed to handling all information responsibly, in accordance with applicable laws, including Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).

This policy explains what data we collect, how we use it, who we share it with, and what your rights are.

We collect the following information when you use the waitlist or privacy-request forms:

• Email address
• Name, if you choose to provide it
• Selected language and signup source
• Signup, consent, marketing-choice, and unsubscribe timestamps, plus the policy version shown when you joined
• For a privacy request: the request type, optional details, status, and processing timestamps

You provide the form information directly. Please do not include passwords, payment data, government identifiers, or other unnecessary sensitive information in a privacy request. The public marketing site does not ask for card numbers or banking credentials.

We use a self-hosted Umami service to understand how the public website is used. The tracking integration can record page paths and referrers, browser, device, language and screen information, and configured events such as button names, selected pricing plans, language choices, and scroll depth.

• Custom analytics events do not include the email entered in the waitlist or privacy-request forms
• The public proxy does not add or forward the visitor's IP address to Umami
• We do not use waitlist information to build advertising audiences

Cloudflare and the web server still process ordinary request metadata needed to deliver and protect the site. We do not describe analytics records as legally anonymous when that conclusion has not been established for the live configuration.

Waitlist and privacy-request information

We use this information to:

• Register and maintain your waitlist entry and communication preferences
• Send the welcome message and essential waitlist or launch communications
• Send optional product or marketing updates when you select the separate marketing checkbox
• Receive, verify, process, and document privacy requests

Website analytics

Analytics information is used to:

• Understand how our website is used
• Improve user experience and navigation
• Improve performance, content, and measurement of interest in public sections

Your email address is transmitted to Brevo (formerly Sendinblue), our email service provider, for contact-list management and sending our communications. Brevo processes that information under its own contractual and privacy terms.

Brevo may store and process your data on servers located within the European Union and/or in other jurisdictions. To learn more about Brevo's privacy practices, please consult their privacy policy at brevo.com/legal/privacypolicy.

We do not sell or rent waitlist information. We may share it with service providers that help operate the waitlist, email communications, hosting, or analytics, only as needed for those services and subject to applicable agreements.

Cloudflare provides DNS, traffic delivery, and security services and may process ordinary network and request metadata, including an IP address, for those purposes. ReVault's PostgreSQL waitlist database and Umami analytics service are self-hosted; infrastructure and network providers may still process technical data needed to operate the service.

When you join the waitlist, we record the version of this policy that was shown to you. We use your address for essential waitlist and launch communications connected to that request. Optional product and marketing updates are controlled by a separate, unticked checkbox.

You may withdraw marketing consent at any time by using the unsubscribe link included in every email or by contacting us directly. You may also request access, correction, deletion, or withdrawal of consent as described below.

Website analytics are described separately above. We do not rely on an unverified claim that all analytics records are anonymous or outside privacy-law requirements.

Your email address is retained while you remain subscribed to the waitlist. When you unsubscribe, we stop promotional emails and retain a limited suppression record as needed to honour that request and maintain our records. We will publish a specific retention period once it has been formally adopted.

Analytics data is retained according to the configured analytics service settings and our operational needs.

Privacy requests and their processing records are retained as needed to complete the request, document the response, and meet applicable operational or legal requirements. We will update this policy when fixed retention schedules have been formally adopted.

We implement technical and organizational measures on a best-effort basis to:

• Protect your personal information from unauthorized access
• Prevent any loss or misuse
• Ensure the security of our systems

Waitlist and privacy-request records are stored in the PostgreSQL service within ReVault's self-hosted deployment. Umami is also self-hosted. Contact information used for email is processed by Brevo, and public website traffic passes through Cloudflare. We do not make a geographic data-residency claim until the live configuration and provider arrangements have been verified.

No absolute guarantee can be offered regarding the security of transmissions over the Internet.

Under Law 25, you have the following rights regarding your personal information:

• Access — You may request to view the personal information we hold about you.
• Rectification — You may request the correction of inaccurate or incomplete information.
• Deletion — You may request the deletion of your personal information.
• Withdrawal of consent — You may withdraw your consent at any time.
• Complaint — You may file a complaint with the Commission d'accès à l'information du Québec.

Use our privacy-request form or email us with the subject line “Privacy request.” Include the email address associated with your waitlist entry and the action you are requesting (access, correction, deletion, withdrawal, or complaint). Please do not include passwords, payment details, or other unnecessary sensitive information. We will respond within the timeframes prescribed by law.

Submit a privacy request

For any questions regarding this privacy policy or to exercise your rights, you may reach us at:

Our website may contain links to external websites. We have no control over their privacy practices and disclaim any responsibility in this regard. We encourage you to review the privacy policy of each external website you visit.

This policy may be updated at any time. Changes take effect as soon as they are published on this page. Where appropriate or required, we will provide additional notice of material changes affecting how waitlist information is used. We encourage you to review this page regularly.