Privacy Policy

1. Information We Collect

• Account information: name, email address
• Stamp images you upload for processing
• Usage data: stamps processed, features used, subscription status
• Payment information (processed by Lemon Squeezy — we do not store card details)

2. How We Use Your Information

• To provide and improve the Service
• To process payments and manage subscriptions
• To send transactional emails (account confirmation, free tier expiry notices, password resets) via Resend
• To enforce usage limits and detect abuse

3. Data Storage

Your data is stored securely using Supabase (PostgreSQL), hosted on secure cloud infrastructure. Stamp images are processed via the Anthropic Claude API and are not stored by Anthropic beyond the processing request.

4. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate Phil Vault: Supabase (database), Anthropic (AI processing), Lemon Squeezy (payments), and Resend (email).

5. Shared Collections

When you share a collection, estimated values are automatically stripped. Viewers see stamp details only, not valuations.

6. Your Rights

Phil Vault is operated from South Africa and complies with the Protection of Personal Information Act (POPIA). Where applicable to users in the European Economic Area, we also comply with the General Data Protection Regulation (GDPR).

Under these regulations you have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, contact us at hello@philvault.com.

7. Cookies

Phil Vault uses essential session cookies only. We do not use advertising or tracking cookies. A cookie consent banner is shown on first visit and your preference is stored locally.

8. Children's Privacy

Phil Vault is not directed at children under 13. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy periodically. We will notify users of significant changes by email.