Privacy Policy

In plain English

futurevault.cc is operated by the FutureVAULT team. We collect the information needed to run investor accounts, protect access, verify identity where required, and support allocations in the Vaults listed on the platform.

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, full name, phone number, and timezone preferences.
• Identity Verification: Government-issued ID, proof of address, and selfie for KYC compliance.
• Transaction Data: Deposit and withdrawal amounts, active allocations, and yield history.
• Device Information: IP address, browser type, device fingerprint for security monitoring.
• Usage Data: Pages visited, features used, and interaction patterns for platform improvement.

2. How We Use Your Information

• Provide, maintain, and improve the platform.
• Process transactions and deliver yield payouts.
• Verify identity for KYC/AML compliance.
• Detect and prevent fraud, unauthorized access, and security threats.
• Send transactional notifications (yield confirmations, security alerts).
• Send marketing communications (with your consent, opt-out available).

3. Data Security

We implement a multi-zone security architecture to protect your data:

• Passwords are hashed with bcrypt (cost factor 12) and never stored in plaintext.
• Wallet addresses and transaction hashes are stored in an isolated Vault database, separate from application data.
• All communications between services use mutual TLS (mTLS) encryption.
• Private keys are stored in hardware security modules (HSMs) and never exist in application memory.
• Multi-factor authentication (TOTP) is required for all withdrawals and high-value operations.

4. Data Classification

We classify data into sensitivity levels and apply appropriate protections:

• Public: Vault listings, categories, general platform information.
• Internal: Account details, transaction amounts, allocation data — stored in our primary database with full audit logging.
• Confidential: Wallet addresses, blockchain transaction hashes — stored exclusively in our isolated Vault database with minimal logging.

5. Data Sharing

We do not sell your personal information. We may share data with:

• KYC Providers: Identity verification services (e.g., Jumio) to process your verification.
• Communication Services: Email (SendGrid) and SMS (Twilio) providers for notifications.
• Law Enforcement: When required by law, subpoena, or legal process.
• Service Providers: Cloud infrastructure providers who process data on our behalf under strict agreements.

6. Data Retention

Account data is retained for the duration of your account plus 5 years for regulatory compliance. Transaction records are retained for 7 years. KYC documents are retained for 5 years after account closure. You may request deletion of non-essential data at any time.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing activities.
• Export your data in a portable format.
• Withdraw consent for marketing communications.

8. Cookies

We use essential cookies for session management (session indicator cookies) and security. We do not use third-party advertising cookies. Session cookies do not contain sensitive data — they only indicate whether an active session exists.

9. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or in-platform notification at least 30 days before taking effect.

10. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@futurevault.cc.