Privacy Policy

Last updated: April 2026

1. Who We Are

VaultID Inc. ("VaultID", "we", "us") provides cryptographic device authentication services for hardware manufacturers and brands. This policy explains how we collect, use, and protect data when you visit our website or use our platform.

2. Data We Collect

Website visitors: We use Cloudflare Web Analytics, which collects no personal data, uses no cookies, and does not track individuals across sites. We collect only aggregate page view counts and performance metrics.

Contact form submissions: When you submit our contact form, we collect your name, email, company, role, estimated device volume, and any message you provide. This data is processed by Formspree and stored securely.

NFC authentication events: When a consumer taps an NFC-enabled device, our servers process the cryptographic signature. We log: device serial number, timestamp, geographic region (country/state level), and authentication result. We do not collect consumer personal data, device identifiers, or IP addresses from NFC taps.

3. How We Use Data

Contact form data is used solely to respond to your inquiry and evaluate partnership opportunities. NFC authentication logs are used to provide authentication services, generate analytics dashboards for brand partners, and detect counterfeit activity patterns.

4. Data Sharing

We do not sell personal data. Brand partners receive only aggregated, anonymized scan analytics for their own devices. We share data with law enforcement only when required by valid legal process.

5. Your Rights

Under GDPR (EU) and CCPA (California), you have the right to access, correct, delete, or port your personal data. To exercise these rights, email privacy@vaultid.io.

6. Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256). NFC cryptographic keys are stored in hardware security modules (HSMs) and never exposed to application code.

7. Contact

For privacy inquiries: privacy@vaultid.io