SafeVault Privacy Policy

Effective date: 2 October 2026

1. Who we are

SafeVault is a document management service operated by AmitaSoft, LLC ("AmitaSoft", "we", "us"), based in League City, Texas. This policy explains what information we collect when you use safevaultusa.com, the SafeVault app at app.safevaultusa.com and the SafeVault provider workspace, how we use it, who we share it with, and the choices you have.

SafeVault is offered to users in the United States only.

2. What this policy covers

This policy covers information about you as a website visitor, an account holder, a family member added to an account, or a client of a firm that uses SafeVault. If a firm invites you to upload documents through SafeVault, the firm decides what it asks for and how it uses your documents, and we process them on the firm's behalf.

3. Information we collect

Information you give us

• Account details: first, middle and last name, email address, mobile number, date of birth and password.
• Documents: the files you upload or import, and their names, types and categories.
• Identity verification: your name, images of an identity document and a selfie, collected through our identity verification provider. See section 11.
• Family and sharing details: names, email addresses and phone numbers of people you add to your account or share documents with.
• Payment details: billing name and email. Card details are entered directly with our payment provider; we keep only the card brand, the last four digits and your billing history.
• Support and feedback: messages, attachments and feedback you send us.

Information created when you use SafeVault

• Document data: text read from your documents, extracted fields such as dates and names, classifications, search indexes, tags and tasks.
• Search: the questions you type into search and the answers generated for you.
• Activity: uploads, shares, renames, deletions and other actions on your documents, shown to you in the activity log.
• Device and security data: IP address, approximate city derived from your IP address, browser, operating system, device identifiers and sign-in times, used to protect your account and alert you to new devices.

Information from others

• If you sign in with Google, we receive your name, email address and basic profile details from Google.
• If you import files from Google Drive, Microsoft OneDrive or Dropbox, we receive only the files you select.
• Our identity verification provider tells us whether your identity check passed.

4. How we use information

• To create and run your account and provide the service.
• To store, organize, classify and search your documents.
• To send reminders ahead of expiry and renewal dates, and notices about your account, security, sharing and billing.
• To verify your identity and protect against fraud and misuse.
• To process payments.
• To answer support requests.
• To keep the service secure, diagnose problems and improve it.
• To understand how people use our website and measure our advertising (website only, see section 7).
• To meet legal obligations and enforce our terms.

We send only product and service messages. We do not send marketing email.

5. How SafeVault uses AI

SafeVault uses AI to read, classify and search your documents. Your document content is processed by automated systems, including these outside AI providers:

• Reading documents: images of your document pages are sent to Google's Gemini service to read their text.
• Classifying and extracting: document text is sent to Anthropic's Claude models, which we access through Amazon Web Services (Amazon Bedrock), to identify the document type and extract key fields.
• Search answers: when you use search, your question and excerpts from your matching documents are sent to Anthropic's Claude models through Amazon Bedrock to generate an answer.
• Search indexing: search indexes are built with an open-source model that runs in our own cloud environment.

These providers process your content only to return results to us. They do not use your documents to train their models.

Because SafeVault reads your documents to provide these features, it is not an end-to-end encrypted or zero-knowledge service. AI results can be wrong, so check extracted values before you rely on them.

6. How we share information

We do not sell your personal information. We share information only:

• With people you choose: when you share a document, add a family member or work with a firm through SafeVault.
• With service providers that run parts of the service for us, listed below. They may use your information only to provide their services to us.
• For legal reasons: to comply with law, a court order or a valid legal request, or to protect the rights, safety and security of our users, AmitaSoft or others.
• In a business transfer: if AmitaSoft is involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

7. Cookies and analytics

Our website, safevaultusa.com, uses cookies from Google Analytics (_ga, _ga_V7LBT07867) to understand visits, and from Meta (_fbp) to measure advertising.

The SafeVault app does not use analytics or advertising cookies. It uses three secure cookies (sv_access, sv_refresh, sv_consent_access) to keep you signed in; they expire after two hours.

You can block or delete cookies in your browser settings. Blocking the website's analytics and advertising cookies does not affect the service. Blocking the app's sign-in cookies will stop you from signing in.

8. How we protect information

We encrypt data in transit using TLS, and encrypt databases and stored documents at rest. Access to systems and customer data is role-based, and multi-factor authentication is required for access to critical systems. AmitaSoft, LLC has received a SOC 2® Type 2 report covering Security, Availability, Processing Integrity and Confidentiality; details are on our Security page.

No system is completely secure, and we cannot guarantee the security of information you send us.

9. Retention and deletion

• Documents: when you delete a document, it moves to Trash and any sharing on it stops. Two days later it is permanently deleted, including the stored file.
• Your account: if you deactivate your account, your access is disabled and all sharing stops. Your documents are kept so that you can reinstate your account by contacting us. To have your account and documents permanently deleted, email support-safevault@amitasoft.com from your account email. We will complete the deletion within 30 days of verifying your request.
• Backups: deleted information stays in our backups for up to 90 days, and for some types of data up to one year, before the backups expire.
• What we keep longer: we may keep billing records and limited account information where the law requires it, to resolve disputes or to enforce our agreements.

10. Your choices and rights

• Access and download: you can view and download your documents in the app at any time.
• Correct: you can update your profile and payment details in the app.
• Delete: you can delete documents in the app, and ask us to delete your account as described in section 9.
• Notifications: you can change reminder settings in the app. Reply STOP to a WhatsApp message to stop WhatsApp notifications. Messages about your account, security and billing are part of the service.
• State privacy rights: depending on the state you live in, you may have the right to know, access, correct or delete your personal information, and to opt out of certain uses. To make a request, email support-safevault@amitasoft.com. We will verify your identity and respond within 45 days. If we decline your request, you may appeal by replying to our response. We will not discriminate against you for using these rights.

11. Identity verification and biometric information

To protect accounts, SafeVault asks users to verify their identity through Onfido, our identity verification provider.

What happens: you take a photo of a government-issued identity document and a selfie. Onfido compares the face in your selfie with the photo on your document to confirm you are who you say you are. This comparison uses a measurement of facial features, which some laws treat as biometric information.

Your consent: we ask for your consent on the selfie screen before the selfie is taken. You can choose not to continue, but you will not be able to complete identity verification.

How it is used: biometric information is used only to verify your identity and prevent fraud. We do not sell, lease or trade it, and we do not use it for any other purpose.

Who holds it: Onfido processes your document images and selfie on our behalf. SafeVault stores the result of the check and reference identifiers, not your selfie or your face measurements.

How long it is kept: Onfido deletes your identity document images, selfie and face measurements within about 50 days of your check being completed.

12. Children

SafeVault is for adults. You must be at least 18 to create an account, and we check your date of birth at signup. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it.

13. Where information is stored

We store SafeVault data on Amazon Web Services in the United States. Some service providers may process information in other countries under their own safeguards.

14. Changes to this policy

We will post any change here with a new effective date. If a change is material, we will tell you by email or in the app before it takes effect.

15. Contact us

AmitaSoft, LLC
League City, Texas 77573
Email: support-safevault@amitasoft.com
Phone: +1 408-430-3650

For privacy questions or requests, email our privacy contact at support-safevault@amitasoft.com.