VatoVault legal
Privacy policy
This policy explains the information VatoVault processes to operate a private digital purchase vault.
Last updated July 13, 2026
Information collected
We process account identity, email, session security data, selected Envato purchase metadata, encrypted purchase codes, backup activity, storage usage, and administrator audit records.
How information is used
Information is used to authenticate users, verify email ownership, synchronize authorized purchases, run requested backups, enforce plan limits, deliver service emails, investigate failures, and protect the platform.
Registration protection
Public registration uses Google reCAPTCHA to evaluate abuse risk. Google may process interaction, device, network, and security information under its Privacy Policy and Terms. Registration data that is not verified by email remains temporary and is automatically eligible for deletion.
Connected services
OAuth and personal tokens are encrypted at rest. Access is used only for authorized workflows. Cloud storage providers receive files when selected by the administrator and operate under their own privacy terms.
Retention and deletion
Vault files remain until deleted by the account owner or administrator. Security and billing records may be retained where required for fraud prevention, accounting, dispute handling, or law.
Your choices
You can disconnect Envato, delete stored archives, update invoice notes, request account deletion, and contact the operator regarding access or correction of personal information.