Privacy Policy

Last updated: September 1, 2026

1. Who We Are

RigVault, a d/b/a of ForVera Media LLC, an Iowa limited liability company ("RigVault," "we," "us," or "our"), operates the Service. This Privacy Policy explains what information we collect through rigvault.app (the "Service"), why we collect it, and the choices you have.

If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Account information

When you register, we collect the display name, email address, and password you provide. Your password is never stored in plain text: it is hashed using industry-standard, one-way hashing before it touches our database. During the closed beta, registration also requires a shared registration code, which we do not treat as personal information.

Content you provide

Once you're using the product, RigVault stores the gear, case, rig, and loadout records you choose to enter, including any notes, serial numbers, or receipts you upload for your own tracking purposes. This is your content; see Section 7 of our Terms of Use for how we handle it.

Contact form submissions

If you use the contact form, we collect the name, email address, and message you submit, solely to respond to you.

Technical and usage data

Our servers automatically log standard technical data for security and debugging purposes: things like IP address, browser type, timestamps, and pages requested. These logs are not linked to marketing profiles and are not sold or shared with advertisers.

Cookies we set directly

We use cookies that are essential to operating the Service:

• rigvault_session: keeps you signed in during your current browser session. Expires after 2 hours of inactivity.
• rigvault_remember: optional. Set only when you check Save Login For 30 Days at sign in. Keeps you signed in on this device for up to 30 days. Cleared when you sign out or change your password.
• rv_analytics_consent: remembers your analytics opt-in/opt-out choice (see Section 4), so we do not ask you every visit.

We do not use advertising cookies, third-party tracking pixels, or cross-site tracking of any kind.

3. How We Use Information

• To create and maintain your account and workspace.
• To provide the core functionality of the Service: storing and displaying the gear/rig/loadout data you enter.
• To respond to support and contact requests.
• To secure the Service (detecting abuse, debugging errors, maintaining audit logs for administrative actions).
• To understand aggregate product usage, only if you opt in to analytics (Section 4).

We do not use your data to train third-party AI models, and we do not sell personal information.

4. Cookies & Analytics

RigVault uses ForVera Analytics, a self-hosted, cookieless analytics tool (built on Umami) that we run on our own infrastructure, not a third-party ad-tech vendor. It records aggregate page-view and usage statistics only. It does not set cookies, does not fingerprint your device, and does not collect personally identifiable information.

Even so, ForVera Analytics does not run until you actively opt in via the consent banner shown on your first visit. You can decline, and the Service will function identically either way. Your choice is remembered via the rv_analytics_consent cookie described above, and you can change your mind at any time by clearing that cookie in your browser to see the banner again.

5. Service Providers

We use a small number of vendors to operate the Service. None of them are permitted to use your information for their own purposes.

• Resend: delivers the emails generated by our contact form (your name, email, and message are passed to Resend solely to transmit that one email to us).
• Pulsetic: monitors the uptime and performance of our servers. Its real-user-monitoring script collects technical performance data (page load timing, error rates) from your browser; it is not used to identify you individually or to track you across other sites.

Our application and database servers are operated directly by ForVera. They are our own infrastructure, not a third-party cloud data-processing service.

6. Data Retention

We retain account and content data for as long as your account is active. If you request account deletion (Section 7), we will delete your account data within a reasonable time, except where we're required to retain limited records for legal, security, or fraud-prevention purposes. Contact form messages are retained only as long as needed to resolve your request.

7. Your Rights

Regardless of where you live, you may ask us to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated data.
• Export your content in a portable format.

During the closed beta, RigVault does not yet have a self-service settings page for these actions: email privacy@rigvault.app and we will handle your request directly, typically within 30 days. We plan to add self-service account and data controls as the product matures.

8. Children's Privacy

RigVault is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at privacy@rigvault.app and we will delete it.

9. Data Security

We apply industry-standard safeguards, including encrypted connections (HTTPS/TLS) for all traffic, one-way password hashing, cross-site request forgery (CSRF) protection on state-changing requests, and role-based access controls limiting who inside ForVera can access production data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Where Your Data Is Stored

RigVault's application and database servers are located in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

11. Changes to This Policy

We may update this policy as the Service evolves. We will update the "Last updated" date above, and for material changes we will make a reasonable effort to notify active account holders by email.

12. Contact Us

Questions about this policy or your data? Email privacy@rigvault.app.