Resolve Vault

Privacy Policy

Effective date: 2026-02-21 · Last updated: 2026-02-21

This Privacy Policy explains how Hugo Miguel Carvalho Soares (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you use Resolve Vault (the “App”).

1. Data Controller

  • Controller: Hugo Miguel Carvalho Soares
  • Address: Portugal (full legal address to be added before launch)
  • Email: privacy@resolvevault.app (to be confirmed before launch)

2. Data We Process

Depending on features used, we may process:

  • Account/license data: email, license key status, activation metadata.
  • Device data: hardware identifier/hash for license enforcement.
  • App configuration data: backup/export path preferences and settings.
  • Cloud integration data (optional): Google account email, OAuth tokens/credentials, folder IDs.
  • Backup metadata: backup file names, sizes, timestamps, and provider/source.
  • Technical logs: diagnostics and error logs.

We do not intentionally collect backup content unless required for a specific support operation you initiate.

3. Why We Process Data (Purposes)

  • Provide licensing and anti-fraud controls.
  • Enable backup automation and cloud backup workflows.
  • Provide support, diagnostics, and service reliability.
  • Meet legal obligations.

4. Legal Bases (GDPR/UK GDPR)

Where applicable, we process data under one or more of:

  • Contract performance (Art. 6(1)(b)).
  • Legitimate interests (Art. 6(1)(f)) for fraud prevention, security, and reliability.
  • Legal obligation (Art. 6(1)(c)).
  • Consent (Art. 6(1)(a)) for optional integrations where required.

5. Data Retention

  • License/account records: up to 7 years for tax/accounting and legal obligations.
  • Logs/diagnostics: up to 180 days, unless needed longer for active security incidents.
  • OAuth credentials/settings on device: retained until user removes/disconnects or uninstalls app.

6. Sharing and Processors

We may share data with:

  • Licensing/hosting providers.
  • Payment/checkout providers used to fulfil your purchase (Lemon Squeezy, acting as merchant of record).
  • Cloud providers used by your chosen integrations (for example Google APIs).
  • Legal/regulatory authorities when required by law.

We do not sell personal data.

7. International Transfers

If data is transferred internationally, we use lawful safeguards (for example SCCs) where required.

8. Security Measures

We use technical and organizational measures including:

  • Signature verification for licenses.
  • Access controls on backend services.
  • Transport security (HTTPS/TLS) in production.
  • Runtime storage separation and limited credential exposure.

No system is perfectly secure; users should also secure endpoints and backups.

9. Your Rights

Where applicable, you may have rights to access, correct, erase, restrict, object, and data portability.

Contact: privacy@resolvevault.app (to be confirmed before launch)

If unresolved, you may lodge a complaint with your local data protection authority.

10. Children

The App is not directed to children under 16.

11. Changes to This Policy

We may update this Policy. Material changes will be communicated through in-app notice and website/legal page updates.

12. Contact

For privacy requests or questions:

  • Email: privacy@resolvevault.app (to be confirmed before launch)
  • Postal address: Portugal (full legal address to be added before launch)
This document is a template and is not legal advice. Have a qualified lawyer review it before public launch.