Privacy Policy

1. Introduction

RocketVault ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

We collect information in the following ways:

• Account Information: Name, email address, and password when you create an account.
• Payment Information: Billing details processed securely through our payment provider.
• Card Images: Photos you upload for scanning and cataloging.
• Collection Data: Card information, pricing data, and listing details.
• Usage Data: How you interact with our platform after you sign in, including pages visited, feature and control types used, and the category or outcome of product requests and errors. We do not record typed values, card content, payment details, Agent conversations, tokens, or URL query strings in this product activity record.
• Device Information: Browser type, IP address, and device identifiers.

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process card scans and generate pricing estimates
• Create and manage eBay listings on your behalf
• Send you important updates and notifications
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or abuse

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties that help us operate our services (e.g., cloud hosting, payment processing).
• eBay: When you authorize us to create listings on your behalf.
• RevenueCat: iOS in-app subscriptions are processed through RevenueCat, which receives your purchase history and an anonymized user identifier so it can keep your subscription state in sync between the App Store and our backend.
• Legal Requirements: When required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

6. Your Rights

You have the right to:

• Access and download your data
• Correct inaccurate information
• Delete your account and associated data
• Opt out of marketing communications
• Request data portability

7. Product Activity Retention

We retain detailed, first-party signed-in product activity metadata for 90 days so we can diagnose navigation, onboarding, conversion, and technical problems. After that period, we retain only permanent daily aggregate counts, such as page views, uploads, and errors, rather than the detailed event trail.

8. Cookies and Analytics

We use cookies and similar technologies to enhance your experience, analyze usage, and improve RocketVault. On your first visit you will see a consent prompt; analytics cookies do not load until you accept. You can withdraw consent at any time by clearing site data in your browser.

We use the following analytics tools:

• Google Analytics 4 — pageviews, conversion events, and cross-subdomain measurement between rocketvault.io and app.rocketvault.io. Configured with Google Consent Mode v2 (default-deny).
• Microsoft Clarity — session replay and heatmaps to understand how visitors interact with the site. Loads only after consent.
• PostHog — product events such as page, workflow, and error metadata used to find usability problems. Web events are forwarded only after consent and use a pseudonymous account identifier. The native app sends only a limited reliability and critical-workflow event set under a new pseudonymous identifier for each app session. Person profiles are disabled, and events exclude typed text, clicks, card data, filenames, payment data, search terms, request bodies, error messages, and contact information.
• Sentry — we use Sentry for crash and performance monitoring. Sentry receives error stack traces, request paths, browser/device metadata, and your account ID so we can diagnose and fix issues. Sentry does not use this data for advertising.

We never sell personal information. Advertising cookies (ad storage, ad personalization) are loaded only if you explicitly accept analytics consent.

This section applies to RocketVault's websites. The native iOS app does not load Google Analytics or Microsoft Clarity and does not create analytics or attribution cookies. Its limited PostHog reliability events are used only to operate and improve RocketVault, not for advertising, attribution, or tracking users across other companies' apps or websites.

9. Children's Privacy

Our services are not intended for users under 13 years of age. We do not knowingly collect information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: rocketvault.io/contact.