Privacy

Who we are

DEEP Vault is a product of DEEP Works, based in Saint Vincent and the Grenadines. It is a personal money OS and a shop suite. Personal books and shop books stay on split ledgers — they are never mixed.

Questions: Contact or hello@deepvault.app. See also our Terms.

Account data

When you sign up we store the email and name you give us, a hashed password (or a magic link), the workspace you create (personal or shop), country and currency (books default to East Caribbean dollars / XCD), and plan tier. We use this to sign you in, bill the right plan, and send account mail such as welcome and password reset.

Finance data (Supabase)

Your ledgers live in our hosted Postgres (Supabase) with row-level security. That includes invoices, expenses, clients, income, bills, budgets, goals, fuel fill-ups, trips (distance and fuel — not raw GPS unless you keep a route), household boards, net-worth items, and related settings. We do not sell household or shop books. Operators in Studio see operational aggregates and support tools, not a public dump of your rows.

AI processing and quotas

Features such as Coach, weekly Narrate, trip breakdowns, receipt vision, and funding insights send the text or images you ask us to process — a prompt, a receipt photo, trip notes — to model providers. We do not upload your entire vault on each request.

• Free stays on cheaper Flash and Luna models. There is no Sol / Astra / Sonnet on Free.
• Plans have per-minute, per-day, vision, and (on Plus and shop) monthly premium-model quotas. Hitting a quota pauses that kind of AI until it resets. Studio can freeze a workspace or pause AI for everyone if spend runs hot.
• Providers may include Eden AI, OpenRouter, and the underlying model vendors (for example Google Gemini and OpenAI). They process the request to return an answer. Do not paste secrets into Coach.

Household sharing

A household vault is opt-in. You invite people, pick a role, and choose what is shared (for example settle-up and shared charts). Activity stays inside the household. If you turn on email notices, we send those to the addresses the household collected — not to the public directory.

WhatsApp and email

Invoice share and pay reminders can open WhatsApp (wa.me) on your phone so you send the message. Cloud WhatsApp is optional and only runs if the operator configured it. Email (welcome, password reset, Friday Packet, household notices, and the public contact form) goes through Brevo from DEEP Vault. We send mail you asked for, or that your workspace settings turned on.

Backups and export

Settings → Privacy downloads a JSON export of this workspace: shop books, Personal money, and trips. Encrypted backup packs (C2) are for your own restore. You can delete the account from the same Privacy screen. Deletion removes the live books we hold for that account. It cannot unsay an invoice a client already opened, or a directory review already published.

Directory listings and reviews

Shop directory listings are opt-in. The public page shows name, island/parish, hours, pay methods, blurb, badges computed from live Vault signals (not self-asserted), and reviews. Reviews require a signed-in account. You cannot review your own shop. Report spam, scam, or offensive copy; Studio can suspend a listing. Phone and WhatsApp taps on a listing are counted as contact events for the shop — not shared as a public lead list.

Open mobility data (opt-in)

Sharing anonymised trip and fuel totals is off unless you switch it on in Settings. When it is on, monthly releases may include your trips and fill-ups in group totals only.

• No names, emails, user ids, exact timestamps, or exact GPS.
• Places snap to a parish, island, or coarse zone. Times become a week or month plus a time-of-day band.
• Any cell with fewer than 5 distinct contributors (k ≥ 5) is dropped. Studio may raise k, never lower it below 5.
• Researchers and NGOs request access on Open data. We store organisation, purpose, and a contact name/email so Studio can issue a revocable API key (hashed at rest, rate limited). Turning consent off stops future releases from using new data. Already-published aggregates stay — they no longer contain anything that points at you.

Analytics and usage events

We record coarse product usage (for example app opens, APK downloads, sampled page visits, and a public trust heartbeat) so we can keep the service healthy and publish a security score when we have enough operational data. These events are not sold as advertising profiles.

Retention, deletion, and export

We keep account and ledger data while the workspace is open. You can export JSON at any time and delete the account when you are done. Backups you downloaded stay on your devices. Open-data releases and directory pages that were public follow the rules above. For a correction or a human review, email hello@deepvault.app.

Contact

DEEP Works, Saint Vincent and the Grenadines. Product: DEEP Vault. Contact form · hello@deepvault.app · DEEP Works.