BlueVault Privacy Policy

BlueVault Secure Inc (“BlueVault,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy (“Policy”) describes how we collect, use, store, disclose, and protect Personal Data when you access or use our websites, mobile applications, and other online services, or otherwise interact with us (collectively, the “Services”).

We may update this Policy periodically. When we do, we will revise the “Last Updated” date above and, if required by law, provide additional notice (such as posting a notice on the Services or sending a notification). We encourage you to review this Policy regularly. If you have questions, please contact us using the information in the Contact Us section below.

Last Updated April 8, 2026

1. What Personal Data We Collect.
   • “Personal Data” means information that identifies, relates to, describes, or can reasonably be associated with an identified or identifiable individual.
   • The categories of Personal Data we collect depend on how you interact with us.
2. Information You Provide Directly.
   • We may collect Personal Data you provide when you create an account, place an order, sell products to us, communicate with us, request marketing materials, participate in promotions, or otherwise interact with our Services, which may include one or more of the following:
   • • Identifiers and contact information (e.g., name, email address, postal address, telephone number, date of birth)
     • Account credentials (e.g., username and password)
     • Payment and billing information
     • Banking and financial information
     • Tax identification numbers (such as a Social Security number, where required)
     • Government-issued identification (e.g., driver’s license or passport)
     • Discount eligibility information (e.g., military or membership status)
     • Transaction history, product preferences, and order details
     • Communications with customer service or through social media
     • User-generated content such as reviews or comments
     • Video recordings or images captured by CCTV at our facilities
     • Communications via phone or online chat, which may be monitored or recorded for quality assurance, security, recordkeeping, and service improvement purposes, including to support artificial intelligence tools (notice will be provided where required)
   • You may update certain account information by logging into your account or contacting customer service.
3. Information We Collect Automatically.
   • Activity, Device, and Usage Information.
   • We automatically collect information about your interaction with our Services, including device identifiers, IP address, browser type, operating system, app version, time zone, pages viewed, links clicked, access times, referring URLs, and email engagement metrics.
4. Transactional Information.
   • We collect information related to purchases, sales, payments, shipping, and order history.
5. Cookies and Similar Technologies.
   • We use one or more of cookies, pixels, web beacons, SDKs, and similar technologies to operate our Services, remember preferences, analyze usage, provide functionality, and deliver advertising.
   • You may manage cookie preferences through your browser settings or the Your Privacy Choices / Privacy Options link in the footer.
   • We honor legally recognized opt-out signals such as the Global Privacy Control where required by law.
   • Disabling cookies may limit functionality of one or more certain features.
   • Log Files.
     • Our servers automatically log technical information such as IP address, ISP, date/time stamps, and system activity for security, fraud prevention, diagnostics, and operational purposes.
   • Location Information.
     • We may collect general location information derived from IP address or device settings, consistent with your permissions.
   • Inferences.
     • Where permitted by law, we may generate inferences about preferences or interests based on activity and transaction history to personalize content, offers, and user experience.
   • Information from Other Sources.
     • We may receive Personal Data from third parties such as public databases, marketing partners, social media platforms, analytics providers, and data enrichment vendors.
     • When combined with Personal Data we collect directly, such information is treated in accordance with this Policy.
6. How We Use Personal Data.
   • We use Personal Data for legitimate business purposes, which may include:
     • Provide, operate, and improve the Services
     • Process transactions and fulfill orders
     • Communicate regarding accounts, orders, and customer support
     • Personalize content, recommendations, and user experience
     • Send administrative, transactional, and security communications
     • Deliver marketing and promotional communications (subject to opt-out rights)
     • Conduct analytics, audits, research, and product development
     • Detect, investigate, and prevent fraud, security incidents, and unlawful activity
     • Debug and repair system errors
     • Train and improve artificial intelligence and machine learning systems used in our operations
     • Verify identity, age, and eligibility
     • Comply with legal, regulatory, and contractual obligations
     • Protect our rights, property, and the safety of users and others
     • Carry out purposes disclosed at the time of collection or otherwise permitted by law
7. Mobile App Biometric Authentication.
   • Our mobile applications may allow you to use device-based biometric authentication (such as Face ID or fingerprint recognition).
   • We do not collect, store, or access biometric identifiers.
   • Biometric data is managed solely by your device’s operating system.
   • Encrypted session tokens may be stored on your device for convenience and may be disabled at any time by logging out or adjusting device settings.
8. How We Disclose Personal Data.
   • We may disclose Personal Data as follows:
     • Service Providers: Vendors that perform services on our behalf, such as payment processing, order fulfillment, analytics, marketing, customer support, fraud prevention, and IT services
     • Advertising and Analytics Partners: To deliver and measure targeted advertising and marketing campaigns, subject to applicable opt-out rights
     • Affiliates: Corporate affiliates and subsidiaries for internal business purposes
     • Professional Advisors: Legal, accounting, auditing, and insurance providers
     • Legal and Regulatory Authorities: When required to comply with law, legal process, or government requests
     • Business Transfers: In connection with mergers, acquisitions, reorganizations, or asset sales
     • With Consent: When you authorize us to do so
   • We may also disclose aggregated or de-identified information that cannot reasonably identify an individual.
   • Analytics, Tracking, and Targeted Advertising.
     • We use analytics tools (including Google Analytics and Contentsquare) to understand usage patterns and improve our Services.
     • Advertising partners may use cookies and similar technologies to deliver interest-based ads and measure effectiveness.
     • Certain disclosures may constitute “selling,” “sharing,” or “targeted advertising” under applicable state privacy laws.
     • You may opt out through the Your Privacy Choices / Privacy Options link, Global Privacy Control signals, or by contacting us.
     • We do not knowingly engage in targeted advertising using Personal Data of individuals under 18.
9. Data Retention.
   • We retain Personal Data only for as long as reasonably necessary to fulfill business purposes, comply with legal obligations, resolve disputes, and enforce agreements.
   • Retention periods vary based on data type, sensitivity, and legal requirements.
10. Data Security.
    • We implement reasonable administrative, technical, and physical safeguards to protect Personal Data.
    • However, no system is completely secure, and we cannot guarantee absolute security.
11. Third-Party Links.
    • Our Services may contain links to third-party websites we do not control.
    • We are not responsible for their privacy practices and encourage you to review their policies.
12. U.S. State Privacy Notice & California Notice at Collection.
    • Residents of certain U.S. states may have rights to access, delete, correct, or opt out of certain processing of Personal Data, and to not be discriminated against for exercising those rights.
    • Requests may be submitted by emailing info@bluevaultsecure.com.
    • We may verify your identity before fulfilling requests.
    • Authorized agents may submit requests on behalf of consumers with appropriate documentation.
    • Contact us at info@bluevaultsecure.com.