Last updated: February 12, 2026
1. Who We Are
PreVault ("we", "us", "our") develops and operates the PreVault desktop backup application and the associated online services at prevault.app. This policy describes how we collect, use, and protect your information.
2. What Data We Collect
Account & License Data
- Email address and name (when purchasing a license or creating an account)
- License key, license type, and activation status
- Payment transaction IDs processed through Stripe (we do not store credit card numbers)
Telemetry Data
- App version, operating system version
- Anonymous device fingerprint (a locally-generated hash, not personally identifiable)
- Event types (e.g., app launch, backup completed, backup failed)
- Aggregate backup statistics (file counts, sizes) — no file names or contents
Cloud Storage Access
- When you connect Google Drive, OneDrive, or Dropbox, PreVault requests permission to write backup files to your cloud storage.
- PreVault does not read, access, modify, or delete your existing files on these services.
- OAuth access tokens are stored locally on your device only.
3. How We Use Your Data
- License management — to validate, activate, and manage your PreVault license.
- Product improvement — anonymous telemetry helps us understand usage patterns, fix bugs, and prioritize features.
- Cloud backups — to write backup archives to the cloud storage service you connect. This is the sole purpose of the cloud storage access.
- Customer support — to help resolve technical issues.
4. Google API Services — Limited Use Disclosure
PreVault's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- PreVault only uses Google Drive access to write backup files to a designated folder created by the app.
- PreVault does not use Google data for advertising, market research, or any purpose unrelated to providing backup functionality.
- PreVault does not sell, rent, or transfer Google user data to third parties, except as necessary to provide the backup service or as required by law.
- No human reads your Google data unless you explicitly ask us to for support purposes, or it is required for security/legal reasons.
5. Data Sharing
We do not sell, rent, or trade your personal data. We share data only in these limited cases:
- Stripe — processes payments on our behalf. See Stripe's Privacy Policy.
- Legal requirements — if required by law, court order, or governmental request.
6. Data Storage & Security
- License and telemetry data is stored on a secured server within Canada.
- All data is transmitted over HTTPS (TLS encryption).
- Cloud storage tokens are stored locally on your device, never on our servers.
- Access to our server infrastructure is restricted and protected by standard security measures (firewalls, SSH key authentication, encrypted passwords).
7. Data Retention & Deletion
- Telemetry events are aggregated into anonymous daily statistics and raw events are automatically deleted after 90 days.
- License and account data is retained for the duration of your license and as required for financial/legal records.
- You may request deletion of your personal data by contacting us. We will respond within 30 days.
8. Revoking Cloud Access
You can disconnect PreVault from your cloud storage at any time:
- Google Drive — visit Google Account Permissions and remove PreVault.
- OneDrive — visit Microsoft Account App Permissions and remove PreVault.
- Dropbox — visit Dropbox Connected Apps and remove PreVault.
Revoking access stops PreVault from writing to your cloud storage. Backup files already written remain in your cloud storage until you delete them.
9. Children's Privacy
PreVault is not directed at children under 13. We do not knowingly collect personal data from children.
10. Your Rights
Depending on your jurisdiction (GDPR, CCPA, etc.), you may have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict processing of your data
- Data portability
To exercise any of these rights, contact us at the address below.
11. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of PreVault after changes constitutes acceptance of the revised policy.
12. Contact
For privacy-related questions or data requests:
Email: privacy@prevault.app
PreVault is not affiliated with or otherwise sponsored by Google LLC, Microsoft Corporation, or Dropbox, Inc.