Privacy Policy

1. Introduction

FutureVault ("we", "us", "our") provides a savings lockbox service that helps users save money by locking funds until a user-chosen unlock date. This Privacy Policy explains what information we collect, how we use it, and the rights you have over your information when you use FutureVault through our website (future-vault.com) or our mobile applications (collectively, the "Service").

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, and password (hashed).
• Savings data: vault names, target amounts, unlock dates, and deposit history.
• Financial information: we do not store your bank account or card numbers. Payment processing and bank connections are handled by Stripe. We store identifiers issued by Stripe (such as your Stripe Connect account ID and Checkout session IDs).
• Subscription information: tier (free/premium) and subscription status.
• Device & usage data: IP address, browser/device type, and basic analytics about how you use the Service.

3. How We Use Your Information

• To create and maintain your account.
• To process deposits, hold funds via Stripe Connect, and release funds on your chosen unlock date.
• To send transactional emails (sign-up confirmation, password resets, deposit/withdrawal receipts, unlock reminders).
• To operate, secure, and improve the Service.
• To comply with legal obligations, including anti-fraud and financial regulations.

4. Third-Party Services

We share limited information with trusted third parties only as needed to operate the Service:

• Stripe — payment processing, Stripe Connect bank onboarding, subscriptions, and payouts. See Stripe's Privacy Policy.
• Resend — sending transactional emails on our behalf.
• MongoDB Atlas — encrypted database hosting.
• Apple / Google — if you use the mobile app, in-app purchases for Premium subscriptions are processed through Apple or Google per their policies.

We do not sell or rent your personal information to anyone.

5. Data Security

We protect your information with industry-standard safeguards, including HTTPS/TLS encryption in transit, encrypted database storage, password hashing (bcrypt), and JWT-based authentication. No system is 100% secure; if we become aware of a breach that affects your account we will notify you promptly as required by law.

6. Data Retention

We retain your account and vault data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required by law or financial regulation to retain certain transaction records.

7. Your Rights

Depending on where you live, you may have the right to:

• Access, correct, or delete the personal information we hold about you.
• Request a copy of your data in a portable format.
• Withdraw consent or object to certain processing.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email us at arynnkl3@gmail.com.

8. Children's Privacy

FutureVault is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

9. International Users

FutureVault is operated from the United States. If you access the Service from outside the US, your information may be transferred to, stored, and processed in the US and other countries where our service providers operate.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through a notice in the Service. The "Effective date" above will always reflect the latest version.

11. Contact Us

Questions about this Privacy Policy or our data practices? Email arynnkl3@gmail.com.