Privacy at CivicVault

Plain language. What we collect, why, how long we keep it, and what we never do.

What we collect

• Account: name, email, country, professional category, optional organization, password (hashed with scrypt — never stored in readable form).
• Verification: professional links you submit (or provider-confirmed identity where configured), kept separate from your profile, with documented retention and deletion.
• Profile: the professional name/pseudonym, biography, languages, interests, and portfolio links you choose to publish to other verified members.
• Security telemetry: login events, device registrations, abuse signals — metadata only, short retention, IPs anonymized after 30 days.
• Device inventory: cryptographic device keys, OS/platform info, security posture (TPM/secure boot/encryption) — needed to detect compromised devices.

What we never collect or hold

• The contents of end-to-end protected messages (ciphertext only, relayed between member devices).
• Keys that could read your private files — uploaded files are encrypted client-side before they reach us.
• Your precise location (GPS). No GPS coordinates are collected, ever.
• Hardware serials or invasive fingerprints — random device UUIDs instead.

What we never do

• Sell your personal information.
• Advertise against sensitive personal characteristics.
• Profile members politically.
• Voluntarily disclose private member data to governments (see Government Data Request Policy).

Retention

Security logs and telemetry: limited retention (90 days for events; IP anonymization after 30). Message relay metadata: minimal and short-lived. Encrypted files: per user/file-retention policy. Verification records: retained while membership is active, then per documented deletion policy.

Your rights

• Export your data and delete your account.
• Control profile visibility, online status, and contact permissions.
• Review and revoke your registered devices and sessions.

Questions: Contact and Support.