Privacy Policy

Last updated: June 2025

Archivault ("we", "us", "our") operates archivault.in. This policy explains how we collect, use, and protect information when you use our platform.

1. Information We Collect

We collect information you provide directly, including:

Account registration details (name, email address, firm name)
Project data you enter into the platform (project names, budgets, materials, designs)
Files you upload (design drawings, material images, site photos)
Communications through the platform (approval notes, revision feedback)

We also collect usage data automatically, including pages visited, features used, and technical information such as browser type and IP address, via Google Analytics.

2. How We Use Your Information

To provide and operate the Archivault platform
To send you project-related notifications and updates
To respond to your support requests
To improve the platform based on usage patterns
To communicate product updates and relevant information

3. Data Storage and Security

Your data is stored on secure cloud infrastructure (Supabase/AWS). All data is encrypted in transit using TLS and at rest. Access to your organisation's data is controlled by row-level security at the database level - team members only see projects assigned to them, and clients only ever see their single assigned project.

File storage is org-scoped. No user from one organisation can access files belonging to another organisation.

4. Authentication

Authentication is handled by Clerk. We do not store passwords directly. All session tokens are signed JWTs with appropriate expiry.

5. Data Sharing

We do not sell your data. We do not share your project data with third parties except:

Infrastructure providers (Supabase, Clerk, Vercel) who process data on our behalf under appropriate data processing agreements
When required by law or legal process

6. Client Data

When you invite a client to a project, they receive access only to that specific project. Clients cannot access any other project within your organisation. Their email address is used solely to send the invitation and to identify them within the platform.

7. Cookies and Analytics

We use Google Analytics to understand how visitors use our marketing website (archivault.in). This uses cookies. You can opt out via your browser settings or the Google Analytics opt-out extension. The Archivault application itself uses session cookies for authentication.

8. Data Retention

We retain your data for as long as your account is active. If you cancel your account, you may request a data export before deletion. We will delete your data within 30 days of a cancellation request.

9. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@archivault.in. We will respond within 14 days.

10. Changes to This Policy

We may update this policy from time to time. We will notify active users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact us at hello@archivault.in or call +91 90825 25482.