Last updated June 2026

US Privacy Notice

Information for individuals and businesses in the United States about how Vault PDF handles personal information.

Scope

This notice supplements our Privacy Policy for US residents and teams. It describes categories of personal information we collect, your state privacy rights, and how to exercise them.

Vault PDF is operated by Not Another Software Company, a company registered in India. Vault PDF is offered to business teams in the United States, the EU/UK, and other international markets. We do not currently market or tailor the service to customers in India. US customer data may be processed in the United States and other countries through our sub-processors listed in our Privacy Policy.

Registered address: 150, Greenfields Soc., Palodia, Gandhinagar, India 382115

We do not sell your data

Vault PDF does not sell personal information and does not share personal information for cross-context behavioral advertising. We do not use your data for targeted advertising on third-party sites.

Categories of personal information
Collected for business purposes in the last 12 months.
  • IdentifiersEmail address, display name, account ID. Purpose: Account access, support, billing
  • Commercial informationSubscription plan, payment provider customer ID. Purpose: Billing and subscription management
  • Internet or network activityTool usage metadata, hashed IP for security events. Purpose: Service operation, audit, and security
  • Professional informationOrganization name, team role. Purpose: Workspace and collaboration features

We do not collect sensitive personal information (such as government IDs, precise geolocation, or health data) through the Vault PDF application. Core PDF tools do not transmit PDF file contents or filenames to our servers.

Sources

We collect personal information directly from you when you create an account, subscribe, use team features, or contact support. If you use Google sign-in, we receive your email and name from Google. Optional Slack integration data is collected only when an admin connects your workspace.

Disclosures to service providers

We disclose personal information to service providers that help us operate Vault PDF (hosting, authentication, email, billing, monitoring). They may process data in the US and other countries. See the sub-processor list in our Privacy Policy.

Your US privacy rights
California (CCPA/CPRA) and similar laws in Colorado, Virginia, Connecticut, Utah, and other states.

Right to know / access

Request what personal information we collect, use, and disclose about you.

Right to delete

Request deletion of personal information we hold, subject to legal exceptions (e.g. billing records).

Right to correct

Request correction of inaccurate account or profile information.

Right to portability

Receive a copy of personal information you provided in a portable format (available in-app).

Right to opt out of sale or sharing

We do not sell personal information and do not share it for cross-context behavioral advertising.

Right to non-discrimination

We will not discriminate against you for exercising privacy rights.

Signed-in users can download account data, correct profile information, and delete their account from Privacy & data in the account menu. For other requests, email divya@vault-pdf.com from your account address.

You may designate an authorized agent to submit a request on your behalf. We may require verification of your identity and the agent's authority. We respond within the timeframe required by applicable state law (typically 45 days for California).

EU, UK, and other regions

If you are in the EU, UK, or another jurisdiction with GDPR-style protections, see our GDPR page.

Children

Vault PDF is a business service not directed at children. We do not knowingly collect personal information from children under 13 (US COPPA) or under 16 where a higher age applies under local law.

Contact

Not Another Software Company

For privacy, legal, DPA, billing, and general support inquiries, email divya@vault-pdf.com.

Document version 2026-06. Added registered address, expanded sub-processors, signup consent, data-rights settings, retention automation, DPA page, GDPR Art. 13 disclosures, US state privacy rights, and US/international market framing.

This information is provided for transparency and is not legal advice. Consult qualified counsel for jurisdiction-specific requirements.