Skip to content
Legal

Privacy Policy

Last updated: April 2026 v2.0

1. Introduction

ConnectVault.ai ("ConnectVault," "we," "us," or "our") is operated by DAMUK. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, profile photo, and authentication credentials (via Google, LinkedIn, or email/password).

Contact Data: Business card scans, manually entered contacts, imported contacts (e.g., from LinkedIn), and associated metadata such as notes, tags, and interaction history.

Scan Data: Images of business cards uploaded for OCR processing, including extracted text and structured contact fields.

Meeting Data: Audio recordings you choose to capture, transcriptions generated from those recordings, and AI-generated summaries and action items.

Usage Data: Device information, app usage patterns, feature engagement metrics, crash logs, and analytics data collected automatically.

3. How We Use Information

Provide the Service: To create and manage your account, store and organize your contacts, process card scans, deliver AI-powered features (morning briefings, meeting prep, follow-up drafts), and enable communication features.

AI Processing: Your contact data, interaction history, and meeting recordings are processed by our AI systems (ARIA) to deliver personalized briefings, suggestions, and insights. This processing uses third-party AI models.

Analytics: To understand how users interact with the Service, improve features, diagnose technical issues, and make data-driven product decisions.

4. Data Storage & Security

Your data is stored in encrypted databases hosted on MongoDB Atlas with servers in the India region. We use industry-standard encryption for data in transit (TLS 1.2+) and at rest (AES-256).

Access to production data is restricted to authorized personnel only. We conduct regular security reviews and follow best practices for application security.

5. Third-Party Services

We use the following third-party services to operate ConnectVault:

  • Razorpay — Payment processing for subscriptions in India (UPI, cards, net banking).
  • Stripe — International payment processing.
  • Google & LinkedIn OAuth — Authentication providers.

AI Service Providers: ARIA uses multiple AI providers to deliver its features:

  • Anthropic (Claude Sonnet) — Primary AI chat, analysis, and briefings.
  • OpenAI (GPT-4o-mini) — Follow-up drafts and meeting prep. OpenAI Whisper — Audio transcription for meeting recordings.
  • Google (Gemini Flash) — Free tier AI and morning briefings.
  • Mistral AI — Business card OCR text extraction.
  • Voyage AI — Contact semantic search embeddings.

These services have their own privacy policies. We encourage you to review them.

6. Data Processing & Consent Scopes

ConnectVault processes your data under the following categories. Required scopes are necessary for the Service to function; optional scopes can be managed in Settings → Privacy.

  1. Account & Profile Data (required)
  2. Essential Communications (required)
  3. Contact Storage
  4. Business Card Scanning & OCR
  5. AI Chat Processing
  6. Meeting Recording & Transcription
  7. Usage Analytics (auto-deleted after 90 days)
  8. Relationship Intelligence
  9. Communication Style Learning
  10. Contact Enrichment
  11. Proactive AI Suggestions

7. Your Rights

You have the right to:

  • Access your personal data stored in ConnectVault at any time through the app.
  • Export your contacts and data in standard formats (CSV, JSON).
  • Delete your account and all associated data. Upon account deletion, we will remove your data within 30 days, except where retention is required by law.
  • Correct any inaccurate personal information.

8. Grievance Officer

Grievance Officer: grievance@connectvault.ai

Response: within 7 business days

Authority: Data Protection Board of India

9. Contact

If you have any questions about this Privacy Policy, please contact us at hello@connectvault.ai.

Itemised purposes, retention, and processors

We collect: name, email, phone (if you give it), profile photo, authentication identifiers, IP address, device and browser data, contacts and card-scan text you store, meeting recordings you start, tasks, events, and optional calendar invites after you grant calendar sync.

Purposes: provide Vault and ARIA, authenticate you, bill through Razorpay, send essential account mail, improve the product with consented analytics, and meet DPDP record-keeping duties.

Retention: account and Vault data until you delete the account (purge within 30 days); consent audit logs 3 years; financial records 7 years where tax law requires; analytics events 90 days.

Named processors include Razorpay (payments, India), MongoDB Atlas (India region hosting), Amazon Web Services / Render / AWS Amplify (application hosting), Google (identity and optional Analytics after consent), Anthropic, OpenAI, Google Gemini, Mistral, and Voyage (ARIA). We do not sell personal data.

Your rights (DPDP Section 11)

  • Access: Ask what personal data Vault holds about you and how it is used.
  • Correction: Ask us to fix inaccurate or incomplete personal data.
  • Erasure: Ask us to delete personal data we no longer need, or delete your account.
  • Withdraw consent: Withdraw optional consents as easily as you gave them. Essential processing needed to run your account stays until you delete the account.
  • Nominate: Nominate another person to exercise your rights if you cannot (DPDP Section 11).
  • Grievance: Complain to the Grievance Officer. If unresolved, you may approach the Data Protection Board of India.

Intake and SLA: connectvault.ai/data-rights.

Children’s data (DPDP Section 9)

Our services are not directed at children under 18 and we do not knowingly collect their data. Details: /children-policy.

Grievance Officer (DPDP Section 8(10))

Officer: Grievance Officer, Grievance Officer, ConnectVault, Pune, Maharashtra, India.

Email: grievance@connectvault.ai. Acknowledgement within 7 business days. Response within 30 days. Authority: Data Protection Board of India.

Page: /grievance-officer.