Overview
Vault by FIRE Terminal is a secure estate dashboard that helps individuals document and protect their financial accounts, real estate, insurance, legal documents, and key contacts for their family. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
- Account information (name, email) via Clerk authentication
- Vault data entered by you (financial accounts, real estate, insurance, legal documents, business assets, and key contacts)
- Cell phone numbers collected during the invite flow (Vault Guardians and Legal Contacts only)
- Usage data and audit logs for security purposes
How We Use Your Information
- To provide and operate the Vault service
- To send email verification codes to Vault Guardians and Legal Contacts via Resend
- To send transactional emails (invite notifications, security alerts, verification codes) via Resend
- To maintain security audit logs
- We do not sell, rent, or share your data with third parties for marketing purposes
How We Protect Your Information
- All sensitive fields are encrypted using bank-level encryption before being stored
- Account numbers, policy numbers, and other sensitive identifiers are stored encrypted and displayed only as masked values
- Authentication is handled by Clerk with support for multi-factor authentication
- Email-based identity verification codes are delivered via Resend and expire after 10 minutes
- All data is transmitted over HTTPS
- We maintain a complete audit log of all access to your Vault data, including the date and time of every login and data access event by you and your authorized viewers.
Data Sharing
- We share data only with the following service providers necessary to operate Vault: Clerk (authentication), Neon (database hosting), Resend (transactional email and verification codes), and Cloudflare (DNS and infrastructure)
- Vault Guardians and Legal Contacts you invite have read-only access to your Vault data as you have authorized
Data Retention
- Your data is retained as long as your account is active
- You may request deletion of your account and all associated data by contacting [email protected]
- Upon deletion, all encrypted data is permanently removed from our systems
Data Breach Notification
In the event of a data breach that affects your personal information, FIRE Terminal LLC will notify affected users in accordance with applicable law, including California Civil Code Section 1798.82. Notification will be provided via email to the address associated with your account within the timeframe required by law. We will describe the nature of the breach, the information affected, and the steps we are taking to address it. To report a suspected security issue contact [email protected].
Your Rights (CCPA)
California residents have the following rights:
- The right to know what personal information is collected
- The right to request deletion of personal information
- The right to opt out of the sale of personal information (we do not sell personal information)
To exercise these rights, contact [email protected] or visit your account settings.
Email Verification
- Email verification codes are sent only to Vault Guardians and Legal Contacts who have been invited by a Vault Keeper
- Each code is valid for 10 minutes and expires automatically after use
- Access is locked after 5 consecutive failed verification attempts; the Vault Keeper is notified and can restore access
- To opt out of verification emails, contact [email protected]
Security
For detailed information about our security practices visit vault.fireterminal.io/security. To report a security vulnerability contact [email protected].