Legal

Privacy Policy

Last updated: June 23, 2026

Your privacy matters to us. This policy explains in plain language what information DiscoveryVault processes, why we use it, who may help us process it, and the choices available to you. If you have a question, our support team is happy to help.

Who is responsible for your information?

DiscoveryVault, based in Tallinn, Estonia, is responsible for the personal information described in this policy. You can contact us at [email protected].

Information we process

The information we process depends on how you use DiscoveryVault:

• Account information: such as your email address, account settings, plan, and sign-in records.
• Search and service activity: such as search queries, reports, refreshes, credit usage, timestamps, and features you use.
• Technical information: such as IP address, browser and device details, logs, cookies, and security events.
• Billing information: such as payment status, transaction references, amounts, and billing identifiers. Payment providers process payment-card or account details; DiscoveryVault does not need to store your full card number.
• Support information: messages with the live support assistant, support tickets, emails, and details you choose to share so we can help you.

Please do not include passwords, full card numbers, or unnecessary sensitive personal information in searches or support messages.

How and why we use information

We use information to:

• create and manage accounts;
• run searches, generate reports, and provide paid features;
• process payments, subscriptions, credits, and refunds;
• answer questions and manage support tickets;
• secure the service and prevent abuse or fraud;
• understand performance and improve DiscoveryVault;
• comply with legal, accounting, and regulatory obligations.

Under the GDPR, these activities rely on one or more legal bases: performing our contract with you, our legitimate interests in operating and improving a secure service, compliance with legal obligations, and consent where the law requires it. You may withdraw consent at any time for future processing based on consent.

If you submit a rights-holder review request, we process the information you provide, such as your name, company, email address, role, work title, and request details, only to review the request, respond if needed, and maintain a compliance record.

Cookies and similar technology

Essential cookies help with sign-in, security, language preferences, and core site functions. We may also use analytics technology to understand how the service performs and where it can be improved. Browser settings can limit cookies, although blocking essential cookies may prevent parts of DiscoveryVault from working correctly.

Service providers and sharing

We do not sell your personal information. We share it only as reasonably needed to operate DiscoveryVault, protect the service, or comply with law. Providers may include:

• Stripe or PayPal, depending on your payment method;
• hosting, infrastructure, analytics, and security providers;
• email and customer-support service providers;
• professional advisers, authorities, or other parties where required by law or necessary to protect legal rights.

Providers receive only the information needed for their role and may also have their own privacy notices for services they provide directly to you.

International transfers

Some providers may process information outside Estonia or the European Economic Area. Where required, transfers are protected by an adequacy decision, contractual safeguards, or another lawful transfer mechanism.

How long we keep information

We keep information only for as long as needed for the purposes above. The exact period depends on the type of record - for example, active account data is generally kept while the account exists, while transaction, security, and support records may be kept longer where needed for legal obligations, fraud prevention, or dispute handling. Information is deleted or anonymized when it is no longer reasonably needed.

Security

We use reasonable technical and organizational safeguards to protect personal information. No online service can guarantee absolute security, so please use a strong, unique password and contact us promptly if you believe your account has been compromised.

Your privacy rights

Depending on applicable law, you may have the right to:

• access a copy of your personal information;
• correct inaccurate or incomplete information;
• request deletion or restriction of processing;
• receive certain information in a portable format;
• object to processing based on legitimate interests;
• withdraw consent where processing relies on consent;
• complain to your local data-protection authority.

You can delete your account from the account page. For other requests, email [email protected]. We may need to verify your identity before completing a request, and some information may need to be retained where the law allows or requires it.

Children

DiscoveryVault is not intended for children who cannot legally agree to these terms in their country. If you believe a child has provided personal information without appropriate permission, please contact us.

Policy updates

We may update this policy when the service or legal requirements change. The date at the top shows the latest revision. If a change materially affects your rights, we will provide additional notice where appropriate.

Questions or requests

Signed-in users can ask the live support assistant or create a support ticket. You can also visit our Support page or email us directly.

Contact