Privacy Policy

1. Who We Are

Vault / techmanpat operates Vault, a receipt, warranty, and product record service for Australian households.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in connection with Vault. It is written for Australian users and is intended to reflect the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Information We Collect

We may collect account details such as your email address, authentication records, household membership, and preferences.

We collect Vault content you provide or approve, including receipt images, product names, purchase dates, retailer details, warranty periods, item notes, categories, reminder settings, and AI extraction results.

If you forward or import an email, we process the message metadata and attached receipt or invoice needed to create the record. We may also collect billing-provider customer and subscription identifiers, transaction status, and push-notification device tokens; Vault does not receive or store full payment card details.

We collect technical and usage information such as device type, browser or app information, IP address, session data, product analytics events, diagnostics, logs, and security events so we can operate, improve, and protect Vault. Analytics events are designed not to include receipt images, raw receipt text, product names, or payment card details.

3. How We Use Information

We use personal information to provide Vault, authenticate users, store receipts, organise household items, estimate and track warranties, send reminders, support users, secure the service, troubleshoot issues, and improve product reliability.

Receipt images and related purchase data may be processed by AI tools to extract product and warranty information. You should review extracted information before relying on it.

We use limited product analytics to understand sign-up, upload, extraction, billing, and app-reliability flows. We do not use Vault content for advertising and do not sell personal information.

4. Disclosure And Overseas Processing

We use service providers including Vercel for hosting, Supabase for authentication, database, private support chat and file storage, OpenAI for AI extraction, Resend for email, Stripe, Apple and Google for billing, Apple and Firebase for push notifications, and PostHog and Firebase for product analytics. Sentry may process privacy-filtered diagnostics if error monitoring is enabled. These providers may process or store information outside Australia.

We do not sell personal information. We may disclose information where required by law, to protect Vault or users, to enforce our terms, or as part of a business transfer involving Vault.

5. Security And Retention

We use reasonable technical and organisational safeguards designed to protect personal information against misuse, interference, loss, unauthorised access, modification, or disclosure.

We keep personal information, including Chat with Pat messages and attachments, for as long as needed to provide Vault, comply with legal obligations, resolve disputes, protect the service, and maintain accurate records. You may request deletion of your account or content in Vault settings or from the public account deletion page, subject to lawful retention requirements.

Self-service account deletion removes owned household database records, receipt files, Chat with Pat conversations and support attachments, revokes supported connected-service access, and cancels an owned Stripe subscription. Apple App Store or Google Play subscriptions must also be cancelled through the relevant store. Limited information may remain temporarily in backups, security logs, webhook records, and financial records where operationally or legally required.

6. Access, Correction, And Complaints

You may request access to or correction of your personal information by contacting patryk@techmanpat.com. We may need to verify your identity before responding.

If you have a privacy complaint, contact us first so we can investigate. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

7. Children And Changes

Vault is not intended for children under 16. If we become aware that a child has provided personal information without appropriate consent, we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. The current version will be available on this page with its effective date.