MyLifeVault logo MyLifeVault

Privacy Policy

Effective Date: September 14, 2026 · Last Updated: September 14, 2026

Owned and operated by:
Vantageflow Technologies Private Limited
CIN: U62010BR2026PTC085214
Registered Office: H/O Subodh Kumar Jha, Ward No. 09, Pupri, Janakpur Road, Pupri, Sitamarhi – 843320, Bihar, India
Email: info@vantageflowtech.com
Website: https://mylifevault.co.in

On this page

  • 1–4. Introduction & scope
  • 5–21. What we collect
  • 22–29. How we use it
  • 30–34. Sharing & AI/OCR
  • 35–39. Security & storage
  • 41–46. Retention & breach
  • 61–73. Your privacy rights
  • 74–83. Other important terms
  • 81. Contact information

Vantageflow Technologies Private Limited (“Vantageflow”, “Company”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

1. Introduction

This Privacy Policy (“Privacy Policy” or “Policy”) explains how Vantageflow collects, receives, uses, stores, processes, discloses, protects and retains personal data when you use the MyLifeVault website, web application, mobile application, MyLifeVault accounts, MyLifeVault services and features, customer-support channels, communications from Vantageflow, and other services that expressly reference this Privacy Policy.

MyLifeVault is a personal information, document-management and digital organization platform. Because MyLifeVault may be used to store documents containing highly sensitive personal information, we take the protection of such information seriously and design our processing practices around principles of necessity, purpose limitation, security, transparency and user control.

This Privacy Policy should be read together with the MyLifeVault Terms of Use, the MyLifeVault Disclaimer, the Cookie Policy, where applicable, and any feature-specific privacy notices presented to you.

2. Important Privacy Principles

Our approach to your personal data is based on the following principles:

2.1 Purpose limitation

We seek to collect and use personal data for identified and legitimate purposes.

2.2 Data minimisation

We seek to collect only information reasonably necessary for the relevant purpose.

2.3 Transparency

We aim to explain what information we collect and how it is used.

2.4 Security

We implement reasonable technical, administrative and organisational safeguards appropriate to the nature of the information processed.

2.5 User control

Where applicable, you may have rights to access, correct, update, erase or otherwise exercise control over your personal data.

2.6 Retention limitation

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or as required or permitted by applicable law.

3. Who Is Responsible for Your Personal Data?

For purposes of applicable data-protection law, Vantageflow Technologies Private Limited is responsible for personal data processed by MyLifeVault in connection with the services it provides, subject to the particular role and circumstances applicable to a specific processing activity.

Data Fiduciary / Responsible Entity: Vantageflow Technologies Private Limited
Registered Office: H/O Subodh Kumar Jha, Ward No. 09, Pupri, Janakpur Road, Pupri, Sitamarhi – 843320, Bihar, India
CIN: U62010BR2026PTC085214
Privacy Contact: Privacy / Grievance Team, Email: info@vantageflowtech.com
Grievance Contact: Privacy / Grievance Team, Email: info@vantageflowtech.com

Where a third party independently determines the purposes and means of processing your personal data, that third party may act as an independent data fiduciary/controller for that processing and its own privacy policy may apply.

4. Scope of This Privacy Policy

This Policy applies to personal data processed by Vantageflow when you: create a MyLifeVault account; use MyLifeVault; upload documents; enter information; use reminders; use document-management features; use financial or organizational features; contact customer support; communicate with Vantageflow; subscribe to paid services (if introduced); use integrations; use AI or automated features (if introduced); visit MyLifeVault websites; or otherwise interact with MyLifeVault.

This Policy does not necessarily apply to third-party websites, applications, services or platforms that are not controlled by Vantageflow.

What's actually live today (September 2026): account creation and sign-in (email/password and “Continue with Google”), and document/record storage for the features currently released. AI/OCR processing, document sharing, paid subscriptions, marketing communications and third-party analytics are described below because MyLifeVault may introduce them — none of them are active yet. This Policy will be updated, and re-notified where required, before any of them go live.

5. What Is Personal Data?

For this Policy, “personal data” generally means information relating to an identified or identifiable individual, to the extent covered by applicable law. Depending on how you use MyLifeVault, this may include information such as: name; email address; mobile number; date of birth; address; identity information; account information; authentication information; documents; photographs; financial information; insurance information; property information; family information; employment information; education information; medical or health-related information contained in documents; transaction information; device information; usage information; IP address; support communications; and other information you voluntarily provide.

6. Information We Collect

The categories of information we collect depend on how you interact with MyLifeVault.

6.1 Information you provide directly

When you create or use a MyLifeVault account, we may collect information such as: name; email address; mobile number; account credentials or authentication identifiers; profile information; date of birth, where required for a feature; communication preferences; subscription information; and other information necessary to provide the requested service.

We do not intend to collect information merely because it is available. Collection will depend on the features you choose to use.

7. Information You Upload or Store

MyLifeVault is designed to allow you to store and organize information and documents. Depending on your use of the Platform, you may upload or create: identity documents; government documents; certificates; passports; driving licences; PAN or tax-related documents; insurance documents; financial records; bank-related documents; investment-related records; property documents; agreements; contracts; receipts; bills; warranties; educational records; employment records; family documents; photographs; medical records; notes; reminders; important dates; and other personal information.

You decide what information to upload or enter into MyLifeVault. Because the contents of documents may contain personal information about you and other people, you should consider carefully whether a particular document needs to be stored on the Platform.

8. Information About Other People

Your documents may contain information relating to people other than you — for example, a spouse or partner, parents, children, dependants, relatives, employees, customers, clients, nominees, or other individuals.

You are responsible for ensuring that you have the necessary authority, lawful basis or consent required to upload or otherwise process another person's information through MyLifeVault. Where applicable law requires consent or another lawful basis, you should obtain it before uploading or sharing the information.

9. Information Generated by Your Use of MyLifeVault

When you use MyLifeVault, we may generate or collect information concerning: features used; pages viewed; documents uploaded; document categories; search activity; reminder activity; account activity; login activity; subscription activity; support interactions; error reports; security events; preferences; device information; application version; browser type; operating system; approximate network information; IP address; timestamps; and other technical or usage information.

Where possible and appropriate, we may aggregate, anonymize or pseudonymize information for analytics, security and service-improvement purposes.

10. Device and Technical Information

Depending on the Platform and permissions you grant, we may collect technical information such as: IP address; device type; device manufacturer; operating-system version; application version; browser type; language; time zone; network information; crash information; diagnostic information; unique technical identifiers; login timestamps; and security-related information. We use such information primarily to operate, secure, troubleshoot and improve MyLifeVault.

11. Device Permissions

Depending on the features you choose to use, MyLifeVault may request permissions such as camera, photo library, file storage, notifications, microphone, contacts, location, or other device permissions. We will request permissions only where reasonably necessary for the relevant functionality.

Today: the MyLifeVault mobile app requests no camera, photo, location, contacts or microphone permissions — only what's needed for notifications, if and when that feature is enabled.

You can generally manage or revoke permissions through your device or browser settings. Revoking a permission may cause the corresponding feature to become unavailable or operate with reduced functionality.

12. Camera and Document Scanning

If you choose to scan documents through MyLifeVault, the application may access your device camera after you grant the required permission. Images captured through the scanning functionality may be processed to create a document, crop or enhance the image, perform OCR, identify document characteristics, extract information, or provide other document-management functionality. Camera access is not intended to mean that Vantageflow continuously monitors or records your camera.

13. Photo and File Access

If you choose to upload a document or image from your device, MyLifeVault may access the file or image you select or otherwise authorize. MyLifeVault does not need unrestricted access to your entire photo library merely because you upload an individual document, unless a particular feature explicitly requires broader access and you grant the relevant permission. Where the operating system provides a limited-access mechanism, we may use such mechanisms where technically supported.

14. Location Information

MyLifeVault may not require precise location information for ordinary document-management functionality. If a future feature requires location information, we will request the applicable permission where required and explain the purpose for which it is being used. Unless expressly stated otherwise, MyLifeVault is not intended to continuously track your precise physical location.

15. Contact Information

If a feature allows you to create emergency contacts, family profiles, beneficiaries, nominees or other contacts, the information you enter may include another individual's name, phone number, email address, relationship, date-related information, or other information you choose to store. You are responsible for having appropriate authority to provide such information.

16. Authentication Information

Depending on the authentication mechanisms supported by MyLifeVault, we may process information associated with email authentication, mobile authentication, one-time passwords, Google authentication, Apple authentication, passkeys, other identity providers, multi-factor authentication, and account recovery.

Where a third-party identity provider is used, the provider may independently process information according to its own privacy policy. We seek to receive only the information reasonably necessary to authenticate and maintain your account.

Today: email/password and “Continue with Google” are the two supported sign-in methods. OTP, Apple sign-in and passkeys are not yet built.

17. Payment and Subscription Information

If you purchase a paid MyLifeVault subscription, we may receive information relating to subscription plan, transaction identifier, payment status, purchase date, renewal date, billing information, refund information, and other transaction metadata. Where payments are processed by a third-party payment provider or app-store provider, payment-card or banking credentials may be processed directly by that provider rather than being stored by Vantageflow. We recommend reviewing the applicable provider's privacy policy for details of its processing.

Today: MyLifeVault has no paid subscriptions or payment processing of any kind.

18. Customer Support Information

If you contact us, we may collect your name, contact details, account identifier, support request, communications, attachments, technical information, diagnostic information, and information necessary to investigate and resolve your issue. Support communications may be retained for customer service, quality assurance, security, dispute resolution and legal or compliance purposes.

19. Information From Third Parties

We may receive information from third parties where necessary to provide services or where you have authorized such sharing — for example, from authentication providers, payment providers, cloud infrastructure providers, app marketplaces, analytics providers, security providers, communication providers, customer-support providers, AI/OCR providers, integration partners, and other service providers. Where a third party independently controls its own processing, its privacy policy may also apply.

20. Google and Other Identity Providers

If you choose to authenticate through Google or another supported identity provider, we may receive information permitted by that authentication flow, such as name, email address, profile identifier, profile image, where applicable, and authentication tokens or related technical information. We will use such information primarily to authenticate your account and provide the requested service. Where Google APIs are used for a specific feature, the applicable Google API policies and limitations will also apply. We will not request access to unrelated information merely because an identity provider makes additional information technically available.

21. Cookies and Similar Technologies

MyLifeVault may use cookies, local storage, SDKs, pixels and similar technologies for authentication, maintaining sessions, security, preferences, analytics, performance, troubleshooting, fraud prevention, and other legitimate service purposes. Where applicable law requires consent for particular cookies or similar technologies, we will provide an appropriate consent mechanism. You may manage cookies through your browser settings. Blocking certain cookies may affect functionality. The separate Cookie Policy provides additional information.

22. How We Use Personal Data

We may process personal data for the following purposes.

22.1 Providing MyLifeVault

To create and maintain accounts; authenticate users; store documents; retrieve documents; organize information; provide reminders; provide requested features; synchronize information; process subscriptions; provide customer support; and otherwise provide the services requested by you.

23. Security and Fraud Prevention

We may process personal data to detect unauthorized access, prevent fraud, detect account takeover, investigate suspicious activity, protect users, protect infrastructure, prevent abuse, investigate security incidents, enforce access controls, maintain audit logs, and protect the integrity of MyLifeVault.

24. Service Improvement

We may use appropriate information to understand how features are used, identify technical problems, improve usability, improve performance, test new features, diagnose errors, develop new functionality, measure service quality, and improve reliability. Where practical, we may use aggregated, anonymized or pseudonymized information for these purposes.

25. Communications

We may use your contact information to send authentication messages, account notifications, security alerts, service notifications, document-processing notifications, subscription notifications, customer-support communications, legal or policy notices, and other service-related communications. Marketing communications will be subject to applicable consent and opt-out requirements. You may opt out of marketing communications without necessarily disabling essential service communications.

26. Legal and Regulatory Compliance

We may process or disclose personal data where reasonably necessary to comply with applicable law, respond to lawful government requests, comply with court orders, comply with regulatory requirements, protect legal rights, investigate suspected unlawful activity, enforce our Terms of Use, or establish, exercise or defend legal claims.

27. Legal Basis / Lawful Basis for Processing

Depending on the applicable legal framework and processing activity, Vantageflow may process personal data based on: your consent; your request for a service; performance of an applicable agreement; compliance with a legal obligation; legitimate and lawful operational purposes where permitted; protection of security and prevention of fraud; exercise or defence of legal rights; or another lawful basis recognized by applicable law. Where consent is the applicable basis, we will seek consent through an appropriate mechanism.

28. Consent

Where we rely on consent, we aim to obtain consent through a clear and appropriately presented mechanism — for example through account registration, permission prompts, feature-specific consent screens, checkboxes, electronic confirmations, or integration authorization. Consent for optional functionality should not be treated as consent for unrelated purposes.

29. Withdrawal of Consent

Where processing is based on consent, you may withdraw consent, subject to applicable law and reasonable technical requirements. Withdrawal of consent may affect functionality where the relevant information or permission is necessary to provide a feature — for example, withdrawing camera access may prevent document scanning. Withdrawal of consent does not necessarily invalidate processing that occurred before withdrawal where such processing was lawfully carried out.

30. Personal Data Sharing

We do not sell your personal data merely because you use MyLifeVault. We may share or disclose personal data with appropriate recipients where necessary to operate the Platform, provide requested services, comply with law, protect security or otherwise process information in accordance with this Policy — potential categories include cloud infrastructure providers, storage providers, authentication providers, payment processors, communication providers, notification providers, analytics providers, security providers, customer-support providers, AI/OCR providers, professional advisers, auditors, legal advisers, insurers, business partners where necessary to provide an expressly requested feature, affiliates, where applicable, and governmental or law-enforcement authorities where legally required or permitted.

31. Data Processors and Service Providers

We may appoint third-party service providers to process personal data on our behalf, to assist with cloud hosting, storage, databases, backups, authentication, payments, communications, analytics, monitoring, cybersecurity, OCR, AI processing, customer support, application infrastructure, and other technical operations. We seek to use providers that implement appropriate security and data-protection measures and to impose appropriate contractual or operational requirements on them, subject to applicable law.

Today's actual third-party providers: established cloud infrastructure and hosting providers, a managed database service, and Google Identity Services (for “Continue with Google”). No AI/OCR, analytics, payment, or marketing providers are in use.

32. Vendor Due Diligence

Where appropriate and proportionate to the nature of the processing, Vantageflow may evaluate third-party providers based on factors such as security practices, access controls, encryption, data-protection practices, incident response, contractual commitments, compliance requirements, service reliability, and data-location requirements. The exact assessment process may vary according to the type and sensitivity of the service.

33. Data Processing Through AI and OCR

Some MyLifeVault features may use AI, machine learning, OCR or automated processing. Where such functionality is used, personal data contained in your documents may be processed to provide the requested functionality, for purposes such as text extraction, document classification, field extraction, summarization, search, document organization, reminders, duplicate detection, data normalization, and other document-management functionality. Where third-party AI providers are used, we will configure and use them according to the applicable contractual, privacy and security requirements. We will not represent that AI-generated results are always accurate.

Today: MyLifeVault does not use AI, machine learning or OCR of any kind. This section describes how such processing would be handled if and when it is introduced.

34. AI Training

MyLifeVault user content should not be used to train general-purpose AI models unless you have been clearly informed of such use and have provided any consent required by applicable law. Where user content is processed by an AI service provider solely to provide a requested MyLifeVault feature, such processing is intended to be limited to the purposes necessary to provide that feature and subject to the applicable provider arrangements. Any future use of User Content for a materially different purpose will be addressed through appropriate notice and consent where required.

35. Document Content and Confidentiality

Documents uploaded by you may contain highly confidential information. We will process such content only for purposes permitted under this Privacy Policy, the Terms of Use, your instructions and applicable law. We do not claim ownership over your documents merely because they are stored on MyLifeVault. However, technical processing may require authorized systems and service providers to access or process encrypted or otherwise protected information to the extent necessary to provide the relevant service.

36. Encryption and Security

Vantageflow will implement reasonable technical and organizational safeguards appropriate to the nature of the personal data processed. Depending on the relevant system and feature, safeguards may include encryption in transit; encryption at rest; access controls; authentication controls; role-based access; logging and monitoring; vulnerability management; secure software-development practices; backup and recovery controls; infrastructure security; incident response procedures; employee confidentiality obligations; and other appropriate security measures. The precise security architecture may evolve over time. No internet-connected system can be guaranteed to be completely secure.

37. Access Control

Access to personal data within Vantageflow will be limited according to operational necessity and appropriate authorization. Where feasible, access may be controlled through role-based permissions, least-privilege principles, authentication, privileged-access controls, logging, monitoring, and other technical measures. Employees, contractors and service providers may be subject to confidentiality and security obligations.

38. Employee and Contractor Access

Vantageflow will seek to restrict access to personal data to personnel who reasonably require such access for legitimate business or service purposes. Where appropriate, personnel may be subject to confidentiality obligations, security training, access controls, monitoring, disciplinary controls, and termination of access when no longer required.

39. Data Storage and Location

MyLifeVault may use cloud infrastructure and other technology services to store and process personal data. The location of data may depend on the service used, infrastructure configuration, backup architecture, disaster-recovery systems, third-party providers, applicable legal requirements, and future infrastructure changes.

Today: MyLifeVault's infrastructure is hosted with an established international cloud infrastructure provider, in a data-center region outside India. Specific, verified data-residency commitments (for example, storage exclusively within India) will only be added to this Policy once the underlying architecture has been finalized to support them.

Where applicable law imposes restrictions on transfers or processing locations, Vantageflow will comply with those requirements.

40. International Data Transfers

Some service providers or infrastructure used by MyLifeVault may process information outside India. Where personal data is transferred across borders, Vantageflow will implement the measures required by applicable law, which may include contractual safeguards, transfer assessments, provider due diligence, security controls, contractual restrictions, and other legally required measures. The locations of relevant processors may change as the Platform evolves.

41. Data Retention

We retain personal data only for as long as reasonably necessary for providing the requested services, maintaining your account, fulfilling the purposes described in this Policy, meeting legal or regulatory obligations, resolving disputes, preventing fraud, maintaining security, enforcing agreements, or protecting legal rights. Retention periods may differ depending on the type of information.

42. User Document Retention

Documents stored in your MyLifeVault account may generally remain available while your account remains active, subject to your plan, storage limits, technical requirements, deletion requests, account status, applicable law, and the Terms of Use. You should maintain independent copies of documents that are particularly important or irreplaceable.

43. Account Deletion

You may request deletion of your MyLifeVault account through the available account controls, where offered, or by contacting us through the designated support/privacy channel. Upon a valid deletion request, we will process the request in accordance with applicable law and our retention obligations. Deletion may not be immediate in every system because information may temporarily remain in backups, disaster-recovery systems, security logs, legally required records, fraud-prevention systems, dispute records, or other systems where retention is legally permitted or required.

Today: account deletion is handled by contacting info@vantageflowtech.com — an in-app self-service deletion control is planned but not yet built.

44. Data Retention After Account Deletion

Where we are legally permitted or required to retain information after account deletion, we will retain it only for the applicable purpose and period. Where appropriate, retained information may be isolated, access-restricted or otherwise protected from ordinary operational use. Once the applicable retention requirement expires, the information will be securely deleted, anonymized or otherwise handled in accordance with applicable law.

45. Data Backups

Technical backups may contain personal data after information is deleted from active systems. Backups may be retained for disaster recovery, business continuity, security, system integrity, fraud prevention, or legal/compliance purposes. Backup copies may be deleted or overwritten according to the applicable backup lifecycle.

46. Data Breach and Security Incidents

Vantageflow maintains processes intended to detect, assess, contain and respond to security incidents. If we determine that a personal-data breach requires notification under applicable law, we will make the required notifications to affected individuals, relevant authorities, regulators, or other required parties, within the timelines and through the mechanisms prescribed by applicable law. Our response may include containment, investigation, impact assessment, remediation, security improvements, restoration, and required notifications.

47. User Responsibilities for Security

You should use strong authentication credentials; avoid sharing passwords or OTPs; enable available additional security controls; protect your email account; keep your device secure; install application updates; use supported software; avoid compromised devices; report suspicious activity promptly; and log out or secure shared devices. Vantageflow will not request your password or one-time authentication code through unsolicited communications.

48. Phishing and Fraud Warning

Vantageflow will not normally ask you to disclose your password, OTP, authentication code, recovery code, private encryption key, or similar secret credential through an unsolicited email, phone call or message. If you receive a suspicious communication claiming to be from MyLifeVault or Vantageflow, contact us through the official channels published on our website.

49. Children's Data

MyLifeVault is intended for individuals who are at least 18 years old and legally capable of entering into a binding contract under applicable law. Where MyLifeVault processes personal data relating to children, such processing will be handled in accordance with applicable legal requirements concerning children. Users must not knowingly provide children's personal data in violation of applicable law.

50. Sensitive Documents

MyLifeVault may contain information that users consider highly sensitive, including identity information, financial information, insurance information, health-related information, family information, property information, employment information, and other confidential records. We will apply security measures appropriate to the nature and risk of the information processed. Users should nevertheless consider the sensitivity of a document before uploading it and maintain appropriate independent backups.

51. Marketing Communications

Where permitted by applicable law and based on the appropriate consent or legal basis, we may send information about new features, subscription plans, promotions, product updates, educational content, or other Vantageflow offerings. You may unsubscribe from marketing communications through available mechanisms. Unsubscribing from marketing communications will not necessarily stop essential service communications.

Today: MyLifeVault does not send marketing communications.

52. Personalized Content

If MyLifeVault introduces personalization features, we may use information such as selected preferences, feature usage, stored metadata, interaction history, and account settings to personalize the user experience. Where personalization involves processing that requires consent, we will obtain the applicable consent.

53. Analytics

We may use analytics tools to understand feature usage, performance, errors, navigation patterns, device compatibility, service reliability, and aggregate product trends. Where possible, analytics information may be aggregated or pseudonymized. We will seek to avoid sending unnecessary document contents or sensitive personal information to analytics providers.

Today: MyLifeVault does not use any analytics or tracking SDK.

54. Crash Reporting and Diagnostics

MyLifeVault may use technical monitoring and crash-reporting tools to identify application crashes, performance issues, compatibility problems, network failures, security events, and other technical issues. Diagnostic data may include device and technical information necessary to investigate the problem.

55. Logs and Audit Trails

For security and operational purposes, MyLifeVault may maintain logs relating to authentication, account access, security events, document operations, configuration changes, administrative activity, system events, and other relevant operations. Logs may be retained for security, troubleshooting, fraud prevention, compliance and incident investigation.

56. Legal Disclosures

We may disclose personal data where required or permitted by law, including in response to court orders, government requests, regulatory requests, law-enforcement requests, legal proceedings, statutory obligations, or other valid legal processes. Where legally permitted, we may provide notice to affected users. We may not always be able to provide notice where prohibited by law or where doing so could compromise an investigation or legal process.

57. Business Transfers

If Vantageflow undergoes a merger, acquisition, restructuring, financing, sale of assets, sale of the MyLifeVault business, or other corporate transaction, personal data may be transferred as part of the transaction, subject to applicable law and appropriate safeguards. Any successor entity may be required to honor applicable privacy commitments or provide updated notices where required.

58. Affiliates

Where applicable, Vantageflow may share information with affiliated entities where necessary to provide services, support operations, maintain security, comply with law or perform other purposes described in this Policy. Any such sharing will be subject to applicable law and appropriate contractual or organizational safeguards.

59. Third-Party Websites

MyLifeVault may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. You should review the privacy policy of each third-party service before providing personal information.

60. Third-Party App Stores

If you download MyLifeVault from an app marketplace such as Google Play or the Apple App Store, the marketplace may collect information independently. Such processing is governed by the marketplace's own privacy policy and terms. Vantageflow does not control the personal-data practices of the relevant marketplace.

61. Your Privacy Rights

Subject to applicable law, you may have rights relating to your personal data, which may include the right to: obtain information about processing; access personal data; correct inaccurate or incomplete information; update information; request erasure/deletion; withdraw consent where consent is the basis of processing; request information concerning sharing or processing; raise a grievance; nominate another individual where applicable under law; and exercise other rights provided by applicable law. The availability and scope of these rights may depend on the applicable law and the circumstances of processing. The full mechanism for exercising these rights is set out in the MyLifeVault Privacy Grievance & DPDP Rights Mechanism.

62. Requesting Access to Your Data

You may request information about personal data processed by Vantageflow through the designated privacy channel. Depending on the nature of the request, we may ask you to authenticate your account, verify your identity, provide additional information, specify the requested data, or provide information necessary to process the request. This is intended to protect personal data from unauthorized disclosure.

63. Correction and Update

If you believe that personal information held by Vantageflow is inaccurate or incomplete, you may request correction or update. Where account information can be changed directly within MyLifeVault, you may use the available account settings. For information that cannot be changed directly, you may contact the privacy/support team.

64. Erasure / Deletion Requests

You may request deletion of personal data subject to applicable law. Deletion may be refused, delayed or limited where retention is legally required; necessary for a legal claim; necessary for fraud prevention; necessary for security; required to complete a transaction; necessary to comply with a contractual obligation; or otherwise permitted by applicable law. Where deletion cannot immediately be completed, we will handle the request in accordance with applicable legal requirements.

65. Withdrawing Optional Permissions

You may revoke optional device permissions through your device or browser settings where supported. You may also withdraw consent for optional processing through the mechanisms provided by MyLifeVault. Some functionality may cease to work after withdrawal.

66. Data Portability / Export

Where available and technically supported, MyLifeVault may provide mechanisms to export or download your documents and information. Any statutory right to portability will be handled according to applicable law. The availability of a particular export format is not guaranteed unless expressly stated.

Today: a self-service export tool is not yet built; you can request an export of your data by emailing info@vantageflowtech.com.

67. Grievance Redressal

If you have concerns regarding our processing of personal data, you may first contact:

Privacy / Grievance Team
Vantageflow Technologies Private Limited
Email: info@vantageflowtech.com
Address: H/O Subodh Kumar Jha, Ward No. 09, Pupri, Janakpur Road, Pupri, Sitamarhi – 843320, Bihar, India

We will acknowledge and handle grievances in accordance with applicable law and our internal grievance procedures. Where applicable law provides for escalation to a regulatory authority or the Data Protection Board of India, you may have the right to pursue such escalation after following the prescribed process.

68. Identity Verification for Privacy Requests

To protect your personal data, we may need to verify your identity before fulfilling certain privacy requests. Verification may involve authentication through your MyLifeVault account, confirmation through your registered email or mobile number, additional account information, or another reasonable verification method. We will seek to avoid collecting unnecessary information solely for verification.

69. Response to Privacy Requests

We will process privacy requests within the timelines prescribed by applicable law. If a request cannot be fulfilled, we will provide an explanation where required by law.

70. Data of Deceased Users

Where applicable law provides mechanisms concerning personal data of deceased individuals, Vantageflow will follow the applicable legal requirements. Account access after a user's death will not automatically be granted to another individual merely because that person claims to be a family member. Any such request may require appropriate legal authorization.

71. Nominees, Emergency Contacts and Family Features

Where MyLifeVault provides nominee, family, emergency-contact or similar functionality, providing another person's information does not automatically give that person access to your account or documents. Any access-sharing functionality will be governed by the specific permissions and controls provided by MyLifeVault. Users remain responsible for configuring such permissions appropriately.

72. Document Sharing

If MyLifeVault permits you to share documents or information with another person, you are responsible for selecting the appropriate recipient and permissions. Depending on the feature, sharing may permit the recipient to view, download, access temporarily, or otherwise interact with the relevant information. You should review sharing permissions carefully before sending confidential information.

Today: MyLifeVault does not support sharing documents with other users.

73. Revocation of Shared Access

Where a MyLifeVault feature permits shared access, you may be able to revoke access through the applicable controls. Revoking access does not guarantee that a recipient has deleted copies they previously downloaded, photographed, printed or otherwise obtained. You remain responsible for information you intentionally share with another person.

74. Security Research and Responsible Disclosure

Vantageflow encourages responsible reporting of security vulnerabilities. If you discover a potential security vulnerability in MyLifeVault, please report it to info@vantageflowtech.com. Please do not access another user's data; modify or delete data; disrupt services; conduct destructive testing; or publicly disclose a vulnerability before allowing reasonable time for investigation and remediation. See the MyLifeVault Security & Responsible Disclosure Policy for the full guidelines.

75. Data Minimization

We seek to avoid collecting unnecessary personal data. Where a feature can be provided without collecting a particular category of information, we seek to design the feature accordingly. However, some information may be technically necessary to provide particular services.

76. Privacy by Design

Vantageflow seeks to incorporate privacy and security considerations into the design and development of MyLifeVault, including least-privilege access, secure authentication, encryption, limited data collection, access controls, audit logging, secure development practices, privacy reviews, vendor assessments, retention controls, and incident-response planning.

77. Automated Decision-Making

MyLifeVault may use automated processing to organize, classify, extract or summarize information. Unless expressly stated otherwise, such processing is intended primarily to assist users rather than make legally or similarly significant decisions about them. Where applicable law provides rights concerning automated decision-making, we will comply with those requirements.

78. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in MyLifeVault functionality, new technologies, new service providers, changes in applicable law, regulatory requirements, security improvements, changes in data-processing practices, or business requirements. The revised version will include a new “Last Updated” date. Where required by law, we will provide notice or obtain consent for material changes. We recommend reviewing this Policy periodically.

79. Effective Date

This Privacy Policy becomes effective on the date specified at the beginning of the document. For existing users, changes will become effective according to the applicable notice and consent requirements.

80. Governing Law

This Privacy Policy shall be governed by the laws of India, subject to applicable mandatory privacy, consumer-protection and data-protection rights.

81. Contact Information

For privacy-related questions, requests or concerns:

Vantageflow Technologies Private Limited
Registered Office: H/O Subodh Kumar Jha, Ward No. 09, Pupri, Janakpur Road, Pupri, Sitamarhi – 843320, Bihar, India
Privacy Email: info@vantageflowtech.com
Grievance Email: info@vantageflowtech.com
Customer Support: info@vantageflowtech.com
Website: https://mylifevault.co.in
Privacy / Grievance Contact: Privacy / Grievance Team
Security Contact: info@vantageflowtech.com

82. Summary of Your Privacy Controls

ControlHow
Update profile informationMyLifeVault Account Settings
Manage device permissionsDevice / Browser Settings
Withdraw optional permissionsDevice / Browser Settings
Manage marketing communicationsUnsubscribe / Account Settings (not yet applicable — no marketing sent today)
Request access to personal dataPrivacy Contact
Request correctionAccount Settings / Privacy Contact
Request deletionAccount Settings / Privacy Contact
Request account deletionPrivacy Contact (self-service coming soon)
Request document exportPrivacy Contact (self-service export coming soon)
Report a privacy concernPrivacy / Grievance Team
Report a security vulnerabilitySecurity Contact
Report unauthorized account accessCustomer Support / Security Contact

83. Final Privacy Commitment

MyLifeVault is designed to help users organize important aspects of their lives without requiring them to give up control of their personal information. Vantageflow Technologies Private Limited is committed to collecting information responsibly; using information for legitimate and disclosed purposes; protecting information with appropriate safeguards; limiting unnecessary access; maintaining appropriate retention practices; respecting applicable data-protection rights; responding responsibly to security incidents; and continuously improving the privacy and security of MyLifeVault.

Nothing in this Privacy Policy is intended to limit any right or protection that cannot lawfully be limited under applicable law.

© 2026 Vantageflow Technologies Private Limited. All Rights Reserved.