Privacy policy

HELAÜLOOM© respects your privacy. This policy describes how HELAÜLOOM© collects, uses, and protects your information (GDPR and CCPA aligned).

What we collect. Account details, vault content you choose to store, audit logs of access and changes, and payment metadata processed by Stripe.

Encryption. Vault content is encrypted at rest with AES-256-GCM. Data in transit uses TLS. Offline exports are encrypted bundles you control with your environment key.

How we use data. To operate the service, send notifications you request, score vault completeness, detect unusual access patterns, and comply with law.

Your rights. You may export, correct, or delete your account and associated data subject to our data retention policy.

Sub-processors. We use the following sub-processors to operate HELAÜLOOM. Each is contractually bound to protect your data and only process it for the stated purpose.

Hostinger · Stripe · Resend · Inngest · Sentry · FingerprintJS · Expo · Apple and Google · OpenAI · Calendly · Printful. What each one does is listed on our subprocessors page.

Contact: privacy@helauloom.com