EliteVault

Legal

Privacy Policy

Last updated: October 2026

This Privacy Policy explains how Vital Living LLC( “EliteVault”, “we”, “us”) collects, uses, and protects your information when you use EliteVault. If you have any questions, contact us at support@elitevaultapp.com.

1. Who we are

EliteVault is an AI-powered ecommerce conversion-audit service operated by Vital Living LLC, established in New Mexico, United States. We are the data controller for the personal data described below.

2. Data we collect

  • Account data — your email address and, optionally, your name and avatar, handled through our authentication provider (Supabase). Passwords are never stored by us in plain text.
  • Content you submit for analysis — the store URLs you audit and the screenshots captured or uploaded for those audits, which are stored in our hosted storage to render your results. Audits can also be run without an account; those are stored the same way (see sections 5 and 7).
  • Support messages — questions you type in the help chat or send through the contact form. Chat questions are answered with the same AI provider described in section 5.
  • Billing data — handled by Stripe. We store a Stripe customer reference and your plan/subscription status; we do not store your full card number.
  • Technical & usage data — device/browser information, IP address, and product analytics events used to operate and improve the service.

3. How we use your data

  • To provide the audits, scores, and other features you request.
  • To process subscriptions, payments, and account management.
  • To send transactional emails (receipts, billing notices, account and security messages).
  • To maintain security, prevent abuse, and comply with legal obligations.
  • To understand product usage and improve the service.

4. Legal basis

Where data-protection laws such as the GDPR or UK GDPR apply, we rely on: performance of a contract (to provide the audits and account you request); our legitimate interests (to secure, maintain and improve the service and prevent abuse); compliance with legal obligations (e.g. tax and accounting records); and your consent where the law requires it, which you can withdraw at any time.

We do not currently show a cookie-consent banner. Our product analytics (PostHog, plus Vercel Web Analytics and Speed Insights) run on the basis of our legitimate interests in understanding and improving the service. PostHog honours your browser's Do Not Track setting, and you can ask us to exclude you from analytics at any time by emailing support@elitevaultapp.com.

5. AI processing

To produce an audit, the content you submit (the page URL and its screenshot) is processed by our AI provider, Google Gemini. We send only what is needed to generate your result.

EliteVault does not train any AI model on your URLs, screenshots, or audits, and we never sell them. Your analyses are private to your account unless you create a share link. A share link opens a public, read-only page (verdict or score, summary, annotations and the screenshot) that anyone with the link can view and that search engines may index; we do not currently offer a self-serve way to turn a link off, so email us and we will remove it. Audits run without an account can only be opened from the browser session that started them, until you create an account to keep them.

Community and reviews. If you publish an audit to the Community (paid plans), a public snapshot of it is shown on our site until you unpublish it; the original audit stays private. Reviews you submit, including your displayed name and any photos you attach, may be shown publicly on our site once approved; email us to have one removed.

How Google uses this content. EliteVault currently runs on the Google Gemini API free tier. Under Google's free-tier terms, the content we send to generate your audit (the page URL and its screenshot) may be used by Google to improve its products and services, and human reviewers may read and annotate it. Google states that content submitted through its paid tier is not used for those purposes. Because of this, please do not run audits on pages containing confidential or personal information you would not want reviewed. If we move to Gemini's paid tier, we will update this section.

6. Service providers (sub-processors)

We rely on the following processors to operate EliteVault:

  • Stripe — payment processing and billing.
  • Google (Gemini) — AI processing of audits and of help-chat questions.
  • Google (Sign-In) — optional “Continue with Google” login.
  • Supabase — database, authentication, and file storage.
  • Inngest — background job queue that runs audits (receives the audited URL and account/audit identifiers).
  • Resend — transactional email delivery.
  • Vercel — application hosting and delivery, plus Vercel Web Analytics and Speed Insights.
  • PostHog — product analytics.
  • ScreenshotOne, Microlink, thum.io and WordPress mshots (Automattic) — website screenshot capture. They receive the public URL of the page to capture (not your account data); we use them as fallbacks for one another.

Each processor handles data only as needed to provide its service to us, under its own terms and security commitments.

7. Data retention

Account data and audits: kept while your account is active, including the screenshots stored for those audits (a screenshot may also be reused to speed up a repeat audit of the same URL). Deletion: you can request deletion of your account and data at any time by emailing support@elitevaultapp.com; we complete it within 30 days (there is no self-serve deletion yet). Anonymous audits (run without an account): kept until deleted on request; they are not removed automatically. Shared audits: a share link stays public until we remove it on request. Billing records: kept as required by tax and accounting law (generally up to 7 years); card data is held by Stripe, not by us. Server and analytics logs:kept according to our providers' standard retention.

8. International transfers

EliteVault is operated from the United States, and our providers may process data in the US and other countries. Where required, transfers rely on safeguards offered by those providers, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework where the provider is certified.

9. Your rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. To exercise any of these rights, contact us at support@elitevaultapp.com. We respond within 30 days. If you are in the EU or UK, you can also complain to your local data-protection authority.

10. Changes to this policy

We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, take additional steps where required.

11. Contact

Questions about privacy? Email support@elitevaultapp.com.