Privacy Policy

Who we are

Accio Vault ("Accio Vault", "we", "us") provides a secure document vault for individuals and families to store and organise their personal life admin. Our service is available at getaccio.co.

If you have questions about this policy, contact us at: privacy@getaccio.co

What data we collect

Account data

When you sign up, we collect your name, email address, and password (stored as a secure hash - we never see your actual password).

Household data

Information you choose to add about yourself and your household members: names, dates of birth, relationships, and any structured data you enter into category fields (e.g. passport numbers, vehicle registration, insurance policy numbers).

Documents

Files you upload to your vault - PDFs, images, and other documents. These are stored encrypted in our cloud infrastructure.

Usage data

Basic information about how you use the service: pages visited, features used, and actions taken. This helps us improve the product. We do not sell this data.

Payment data

If you subscribe to a paid plan, payment is processed by our payment provider. We do not store your card details.

How we use your data

We use your data only to provide and improve the Accio Vault service:

• To operate your vault and give you access to your documents
• To send you account-related emails (verification, security alerts, subscription receipts)
• To notify you of upcoming document expirations if you have added expiry dates
• To respond to your support requests
• To improve the product based on anonymised usage patterns

We do not use your data for advertising. We do not sell your data to third parties. Ever.

Where your data is stored

Your data is stored on servers located in the European Union (Frankfurt, Germany), operated by Supabase. This means your data is subject to GDPR protections regardless of where you are based.

We comply with both the EU General Data Protection Regulation (GDPR) and the Israeli Privacy Protection Law, 5741-1981.

Security

We take the security of your documents seriously:

• All data is encrypted at rest using AES-256 encryption
• All data is encrypted in transit using TLS
• Passwords are hashed and never stored in plain text
• Two-factor authentication is available and recommended
• Access to your vault is restricted to members of your household only

Who we share data with

We share data with a small number of trusted third-party services that help us operate Accio Vault:

• Supabase - database and file storage (EU-hosted)
• Our payment provider - for processing subscription payments
• Email delivery provider - for sending transactional emails

These providers are bound by data processing agreements and may not use your data for their own purposes.

We do not share your data with anyone else. We will only disclose data to law enforcement if required by a valid legal order.

Your rights

Under GDPR and Israeli privacy law, you have the right to:

• Access - request a copy of the data we hold about you
• Correction - ask us to correct inaccurate data
• Deletion - request that we delete your account and all associated data
• Portability - receive your data in a machine-readable format
• Objection - object to how we process your data

To exercise any of these rights, email privacy@getaccio.co. We will respond within 30 days.

Data retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete all your data within 30 days, with the exception of data we are required to retain for legal or financial compliance purposes.

Cookies

We use only essential cookies required to keep you logged in and to maintain your session. We do not use tracking or advertising cookies.

Children

Accio Vault is not intended for use by children under the age of 13. We do not knowingly collect data from children. Household member profiles for children may be created by a parent or guardian.

Changes to this policy

If we make material changes to this policy, we will notify you by email before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.

Contact

privacy@getaccio.co