← Back to Revault

Privacy Policy

Effective Date: April 22, 2026 · Last Updated: April 22, 2026 · Contact: support@revaulthq.com

1. Information We Collect

To provide our account protection service, we collect the following information from creators who use Revault:

• Instagram username and account metadata (follower count, account type, account status)
• Recovery email address associated with your Instagram account
• Backup email address (optional)
• Phone number associated with your Instagram account
• Instagram backup codes (optional, for recovery purposes)
• Facebook profile or page URL (optional, for recovery assistance)
• Date of birth (optional, for identity verification during recovery)
• Platform interaction data including login history and vault access logs

We do not collect or store your Instagram login password. Revault is a documentation and monitoring service. We store recovery information you provide to assist with account recovery, not login credentials.

2. Meta / Instagram API Data

Revault integrates with Meta's official Instagram APIs to monitor account health and accessibility. Specifically:

• instagram_basic — We access your Instagram username, profile picture, account type, and basic profile information to identify and monitor your account
• instagram_manage_insights — We access account health indicators and status information to detect issues such as account restrictions or unauthorized access
• pages_show_list — We access connected Facebook Pages to assist with account recovery through Meta's official recovery processes

This access is granted by you when you connect your Instagram account to Revault. You may revoke this access at any time by visiting your Instagram account settings under Settings → Security → Apps and Websites and removing Revault. We comply fully with Meta's Platform Terms and Developer Policies. Instagram data is used solely to deliver the Revault service and is never used for advertising, profiling, or resale.

3. How We Use Your Information

We use the information you provide exclusively to deliver the Revault service:

• Monitoring your Instagram account's accessibility and health status
• Sending security alerts when anomalies or access issues are detected
• Assisting with account recovery if your account is disabled or compromised
• Generating weekly security reports
• Processing subscription payments
• Providing customer support

We do not use your information for advertising, analytics resale, or any purpose beyond delivering the service you subscribed to.

4. Data Security

All credentials and sensitive information stored in your vault are encrypted at rest using AES-256 encryption. Data is transmitted over HTTPS at all times. Every access to your vault is logged with a timestamp and IP address. We maintain strict access controls and only authorized personnel may access encrypted data.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties. Your data is never used for advertising or marketing purposes. We may disclose information only in the following circumstances:

• Service providers: Trusted third-party providers such as Stripe (payment processing) and our hosting provider, bound by confidentiality agreements
• Legal requirements: When required by law, court order, or governmental authority
• Safety: To protect the rights and safety of Revault and its users

6. Data Retention

Your data is retained for as long as your Revault account is active. Upon cancellation or account deletion, your data is permanently deleted from our servers within 30 days. You may request immediate deletion at any time by contacting support@revaulthq.com or visiting our Data Deletion page.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request permanent deletion of your account and all associated data
• Portability: Request a machine-readable copy of your data
• Revoke Instagram Access: Remove Revault's API access at any time via Instagram settings

To exercise any of these rights, contact us at support@revaulthq.com or visit our Data Deletion page. We will respond within 30 days.

8. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your personal data is your consent and the performance of our contract with you (Article 6(1)(a) and (b) GDPR). You have the right to:

• Access, rectify, or erase your personal data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with your local data protection supervisory authority

For GDPR-related inquiries, contact us at support@revaulthq.com.

9. CCPA (California Residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information. To exercise your CCPA rights, contact us at support@revaulthq.com.

10. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant regulatory authorities as required by applicable law (within 72 hours under GDPR where applicable). We will provide details of the breach, the data affected, and steps we are taking to mitigate the impact.

11. Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and, where appropriate, by email. Your continued use of our services after changes are posted constitutes acceptance of the revised policy.

13. Contact Us