MVP Vault
Privacy Policy
This policy explains how MVP Vault handles information for accounts, subscriptions, billing, prompts, and permitted downloads.
Last updated: October 23, 2026
Optional Sales Analytics
With your permission, we record public page visits, product and pricing views, checkout form submissions, and successful prompt-copy events. These records contain a random browser-tab identifier, event identifier, page path without query strings, time, and a short utm_source campaign label. They do not contain prompt text, passwords, card details, or email addresses. First-touch source attribution is stored for the browser tab and in a one-day cookie, and can accompany Stripe checkout metadata and the resulting payment record. Only verified paid order records are reported as purchases. Browser events are approximate and can be blocked or manipulated. You can decline or withdraw permission using Analytics preferences in the footer; withdrawal clears analytics browser identifiers and stops future collection, but does not remove existing records. We also store your analytics preference for six months. Contact hello@mvpvault.app about previously collected information.
Who Handles Your Information
MVP Vault is operated by Infihelp Solutions Pty Ltd, ABN 59691320019, at Suite 302, 13/15 Wentworth Ave, Sydney, 2000, Australia. This policy describes how we handle personal information when you use mvpvault.app, create an account, subscribe, access content, or contact us. Our privacy contact is hello@mvpvault.app.
Information We Collect
We collect information you provide, including your name, email address, account credentials stored as a password hash, and messages you send to support. We also keep account and email-verification status, subscription and access records, and payment and invoice records. Download logs can include the account, product and file identifiers, request time, IP address, browser information, and whether access was allowed or denied. Earlier purchase records may remain in your account even though individual products are no longer sold.
Payment Data
Stripe processes monthly and yearly subscription payments and one-time lifetime-access payments. We send Stripe account information such as your name, email address, and account and plan references to create checkout sessions and associate payments with your account. We store transaction identifiers, amounts, currency, payment and subscription status, billing periods, access records, and invoice details. We do not store full card numbers or card security codes. Invoices may be emailed to you and retained in your dashboard for your records. Returning from Stripe to your dashboard does not itself confirm payment; Stripe's payment notifications update the account records.
Prompts And Product Content
Product thumbnails and screenshots are used for public previews. Prompts, files, documentation, and setup guides are made available according to your account's access rights. Copying a displayed prompt uses your browser's clipboard function; MVP Vault does not read other clipboard contents. Source-file requests verify your paid access and record the account, product, file reference, and request time. Approved requests open an expiring Cloudflare R2 download or a configured external provider. That provider receives ordinary connection information, such as your IP address and browser details, and applies its own privacy policy. Previously uploaded files and administrative records may remain in storage.
How We Use Data
We use information to create and secure accounts, verify email addresses, process subscription payments, provide access to prompts and guides, manage renewals and cancellations, issue invoices, deliver service emails, investigate failed or abusive access attempts, and respond to support requests. We also use operational logs to diagnose faults and maintain the service.
Cookies And Browser Storage
We use a session cookie to keep you signed in and protect account-only pages. Your light or dark display preference is stored in your browser's local storage. You can clear or restrict cookies and local storage through your browser settings, but disabling the session cookie prevents signed-in features from working. Stripe may use its own cookies and similar technologies when you use its checkout or billing portal.
Service Providers
We use service providers to operate the platform, including Stripe for payments, Hostinger for hosting, Supabase for database services, Cloudflare R2 for file storage, and the configured email provider for account and invoice messages. Information is shared as needed for the relevant service, such as an email address for delivery or account references for billing. Providers may process or store information outside Australia, depending on their service and configured hosting locations. We may also disclose information where required by law or necessary to address fraud, security incidents, or legal claims.
Retention
We retain information for as long as needed to provide account and subscription services, maintain billing and invoice records, resolve disputes, and meet applicable legal obligations. Cancellation ends future recurring billing but does not automatically delete your account, invoices, earlier purchase records, or security logs. You can ask us to close your account or delete information; some records may need to be retained for legal, accounting, security, or dispute-resolution reasons.
Security
We use password hashing, account verification, access controls, entitlement checks, and protected download routes to safeguard accounts and eligible content. Source-file links are released only after paid access is verified. Expiring links limit the time a download URL can be used, but downloaded files and external links may still be copied or shared. No system can be guaranteed completely secure. Keep your password and account access private and contact us if you suspect misuse.
Access, Correction And Privacy Complaints
Email hello@mvpvault.app to request access to or correction of your personal information, ask about account closure or deletion, or make a privacy complaint. We may need to verify your identity before acting on a request. If we cannot fulfil a request, we will explain the reason, subject to applicable law. If you are dissatisfied with our response, you may contact the Office of the Australian Information Commissioner or another relevant privacy regulator where applicable.
Policy Updates
We may update this policy to reflect changes to the service or our information-handling practices. The date on this page identifies the latest revision. Where required, we will provide additional notice of material changes.
Read our Terms and Conditions, Stripe's Privacy Policy, and OAIC privacy complaints information.