Privacy Policy

We may collect the following types of personal information:

• Full name
• Email address
• Content you add: collections, items and their details, tags, photos and documents
• Cookie and session data
• IP address and device information

You can read the public pages of the Service, including this policy, without telling us who you are. To use the app itself you need an account, which needs your name and email address. Without them we can’t create an account for you.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Respond to your enquiries and provide customer support
• Comply with legal obligations

We process your personal data on the following legal bases: (a) Contract — to provide you with the Service; (b) Legitimate interests — to improve our Service and prevent fraud; (c) Legal obligation — where required by law.

We use the following third-party services, which may collect information as described in their privacy policies:

• Amazon Web Services (AWS) — cloud infrastructure, hosting, and the emails we send about your account. Privacy Policy
• Cloudflare — domain name services, and forwarding of email sent to our addresses. Privacy Policy
• Google Fonts — the icon font used in the Service. Your browser downloads it from Google, which receives your IP address. Privacy Policy
• Open Library — book details. When you look up a book, we send the ISBN or title you entered to Open Library, and cover images in the results are loaded from Open Library by your browser. Terms and Privacy Policy
• DC Books — book details. When you look up a book, we send the title you entered to DC Books, and cover images in the results are loaded from DC Books by your browser. Privacy Policy
• PathTags — pathtag details. When you look up a pathtag, we send the serial number you entered to PathTags, and pictures in the results are loaded from PathTags by your browser or app. Privacy Policy (on their home page)

Your information is stored in Australia, in AWS’s Sydney region.

We do not sell your personal information. We share it only:

• with the services listed above, so they can run the Service for us;
• when the law requires it, for example to comply with a court order;
• if the Service is sold or transferred to someone else, in which case your information goes with it and this policy continues to apply to it.

We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Things you delete are hidden straight away; ask us and we will delete them permanently. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or destruction. No method of storing or sending data is completely secure, but we work to protect yours.

Wherever you are located, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to restrict processing — request that we limit how we use your data.
• Right to data portability — receive your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.

To exercise these rights, contact us at privacy@infinitevault.app. We will respond within 30 days. Before we act on a request to access, correct or delete your data, we may ask you to confirm that it is you, so that no one else can get or change your information.

If you have a concern about how we handle your personal information, contact us at privacy@infinitevault.app and we will look into it. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

InfiniteVault does not knowingly collect personal information from children under the age of 13. If you are under 18, a parent or guardian must agree to our Terms & Conditions for you. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@infinitevault.app and we will take steps to delete it.

We use only the cookies that are strictly necessary to keep you signed in. We do not use analytics, advertising or tracking cookies. Our Cookie Policy lists each cookie and what it does. If you block these cookies, you will not be able to sign in.

Our Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every site you visit.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. You are advised to review this Privacy Policy periodically for any changes.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Website: infinitevault.app
• Email: privacy@infinitevault.app