Privacy policy

• Email address — for authentication (magic-link login) and subscription management.
• Payment information — handled entirely by LemonSqueezy. We never see or store your card number.
• Search queries — sent to our AI ranking pipeline. Anonymized after 30 days. Used only to improve search quality.
• Usage data — page views via Plausible Analytics (cookie-free, GDPR-compliant). No personally identifiable information.

• We don't store your search history beyond 30-day debugging logs.
• We don't sell, rent, or share your data with anyone for marketing.
• We don't use tracking cookies. Our analytics are privacy-first.
• We don't use Google Analytics, Hotjar, or session-replay tools.

We use the following services to operate Vault:

• Supabase — authentication and database hosting (EU/US regions).
• LemonSqueezy — subscription billing and payment processing.
• OpenAI — generates text embeddings for semantic search. Your queries are sent to their API and subject to their privacy policy.
• Anthropic — ranks search results. Your queries are sent to their API and subject to their privacy policy.
• Vercel — website hosting.
• Plausible Analytics — privacy-friendly, cookie-free analytics.

Vault uses only essential cookies for authentication sessions (Supabase auth tokens). We don't use advertising cookies, social media trackers, or any non-essential cookies.

• Account data (email, subscription) — retained until you delete your account.
• Search logs — anonymized and deleted after 30 days.
• Embeddings (directory entries, not your data) — retained indefinitely.
• Saved entries — retained until you remove them or delete your account.

Regardless of where you live, you can:

• Access — request a copy of all data we hold about you.
• Delete — request deletion of your account and all associated data.
• Export — request a machine-readable export of your data.
• Correct — update your email address from your account page.

For EU/EEA residents: these rights are provided under the GDPR. For California residents: these rights are provided under the CCPA.

For any privacy questions or data requests, email meow@cheesyboy.dev. We'll respond within 7 business days.