Privacy Policy

Who we are

Accio Vault ("Accio Vault", "we", "us") provides a secure document vault for individuals and families to store and organise their personal life admin. Our service is available at getaccio.co.

If you have questions about this policy, contact us at: privacy@getaccio.co

What data we collect

Account data

When you sign up, we collect your name, email address, and password (stored as a secure hash - we never see your actual password).

Household data

Information you choose to add about yourself and your household members: names, dates of birth, relationships, and any structured data you enter into category fields (e.g. passport numbers, vehicle registration, insurance policy numbers).

Documents

Files you upload to your vault - PDFs, images, and other documents. These are stored encrypted in our cloud infrastructure.

Usage data

Basic information about how you use the service: pages visited, features used, and actions taken. This helps us improve the product. We do not sell this data. This information is collected via PostHog (EU) - only after you consent to analytics cookies.

Payment data

If you subscribe to a paid plan, payment is processed by our payment provider. We do not store your card details.

How we use your data

We use your data only to provide and improve the Accio Vault service:

• To operate your vault and give you access to your documents
• To send you account-related emails (verification, security alerts)
• To notify you of upcoming document expirations if you have added expiry dates
• To respond to your support requests
• To improve the product based on anonymised usage patterns

We do not use your data for advertising. We do not sell your data to third parties. Ever.

Where your data is stored

Your primary data storage is in the European Union. Some of the providers listed below may process data outside the EU; where that happens, we put appropriate safeguards in place to keep your data protected.

We comply with both the EU General Data Protection Regulation (GDPR) and the Israeli Privacy Protection Law, 5741-1981.

Security

We take the security of your documents seriously:

• All data is encrypted at rest using AES-256 encryption
• All data is encrypted in transit using TLS
• Passwords are hashed and never stored in plain text
• Two-factor authentication is available and recommended
• Access to your vault is restricted to members of your household only

Service providers (processors)

We share data with a small number of trusted service providers (processors) that help us operate Accio Vault:

• PostHog (EU-hosted) - product analytics. PostHog uses cookies to help us understand how the product is used, and is only activated after you consent via our cookie banner.
• Vercel - hosting of this website.
• Sentry - error monitoring, so we can find and fix problems in the product.
• Supabase - database and file storage for your vault.
• Resend - delivery of transactional emails, such as account verification and security alerts.
• Grow - processing of subscription payments.
• Anthropic - the AI provider we use to extract details from your documents (such as names and dates) so they can be organised in your vault.

These providers are bound by data processing agreements and may not use your data for their own purposes.

We do not share your data with anyone else. We will only disclose data to law enforcement if required by a valid legal order.

Your rights

Under GDPR and Israeli privacy law, you have the right to:

• Access - request a copy of the data we hold about you
• Correction - ask us to correct inaccurate data
• Deletion - request that we delete your account and all associated data
• Portability - receive your data in a machine-readable format
• Objection - object to how we process your data

To exercise any of these rights, email privacy@getaccio.co. We will respond within 30 days.

Data retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete all your data within 30 days, with the exception of data we are required to retain for legal or financial compliance purposes.

Cookies

We use essential cookies to keep you logged in and to maintain your session. If - and only if - you agree via our cookie banner, we also use analytics cookies from PostHog (EU) to understand how the product is used. We do not use advertising cookies, and you can decline analytics and still use Accio Vault.

Children

Accio Vault is not intended for use by children under the age of 13. We do not knowingly collect data from children. Household member profiles for children may be created by a parent or guardian.

Changes to this policy

If we make material changes to this policy, we will notify you by email before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.

Contact

privacy@getaccio.co