GigVault Privacy Policy

At GP Creative Studios, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use GigVault. We are committed to ensuring the security and confidentiality of your data.

Information We Collect

• Account information: When you create an account, we collect your email address and encrypted password.
• Usage data: We collect anonymous usage statistics to improve app performance and user experience.
• Device information: We may collect device identifiers and operating system information for security purposes.
• We do NOT collect, store, or have access to your saved passwords or sensitive vault data. All vault data is encrypted locally on your device.

How We Use Your Information

• To provide and maintain the GigVault service
• To authenticate your account and ensure security
• To send important service updates and security notifications
• To improve and optimize our app performance
• To respond to your support requests

Data Storage & Security

• All sensitive vault data is encrypted using industry-standard AES-256 encryption before leaving your device.
• Your master password is never transmitted or stored on our servers.
• We use secure, encrypted connections (TLS/SSL) for all data transmission.
• Our infrastructure is hosted on secure, SOC 2 compliant cloud providers.
• We regularly conduct security audits and penetration testing.

Your Rights

• Access: You can request a copy of your personal data at any time.
• Correction: You can update or correct your account information.
• Deletion: You can delete your account and all associated data.
• Export: You can export your vault data in a standard format.
• Opt-out: You can opt out of non-essential communications.

Data Retention

• We retain your account data for as long as your account is active.
• If you delete your account, we will remove your personal data within 30 days.
• Anonymous usage statistics may be retained for analytical purposes.
• Backup copies may persist for up to 90 days before complete deletion.

Third-Party Services

• We do not sell or share your personal information with third parties for marketing purposes.
• We may use third-party services for analytics, crash reporting, and infrastructure.
• All third-party providers are vetted for security and privacy compliance.

Changes to This Policy

• We may update this privacy policy from time to time.
• We will notify you of any significant changes via email or in-app notification.
• Continued use of the app after changes constitutes acceptance of the updated policy.