Legal

Privacy Policy

How we handle your data. Last updated March 2026.

Overview

EquiVault is operated by Altitudes Cloud B.V., a company registered in the Netherlands. This privacy policy covers how we collect, use, and protect your data across the EquiVault platform and our marketing site.

Data We Collect

We collect the following categories of data to provide and improve the service:

  • Account data: name, email address, company name, and billing information.
  • Usage data: queries, analysis results, and session logs generated through your use of the platform.
  • Marketing site: page views collected via Plausible Analytics, which is cookieless and does not collect any personal data.

We do not sell personal data to third parties.

How We Use Your Data

  • Provide and improve the EquiVault service.
  • Generate financial analysis, citations, and research outputs.
  • Maintain compliance audit trails for fiduciary mode users.
  • Send transactional emails related to your account, billing, and security.

We do not use your data to train AI models.

Data Storage & Security

  • Data is encrypted at rest (AES-256) and in transit (TLS 1.3).
  • Hosted in AWS EU region (Frankfurt), subject to EU data protection laws.
  • SOC 2 Type II compliant security controls.
  • Enterprise customers may opt for self-hosted deployment where data never leaves their infrastructure.

Cookies

  • Marketing site: no cookies. Plausible Analytics is fully cookieless.
  • Application: session cookies for authentication only. These are strictly necessary and require no consent.
  • We do not use any third-party tracking cookies.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: correct any inaccurate or incomplete personal data.
  • Erasure:request deletion of your personal data (“right to be forgotten”).
  • Portability: export your data in a machine-readable format.

To exercise any of these rights, contact us at legal@equivault.ai.

Data Retention

  • Account data: retained while your account is active, plus 30 days after deletion to allow for recovery.
  • Audit trails: retained for 7 years to meet fiduciary compliance requirements.
  • Marketing analytics: aggregated data only; no personal data is stored.

Changes

We may update this privacy policy from time to time. Material changes will be communicated via email to all registered users.

Contact

For privacy-related inquiries, contact us at legal@equivault.ai.

Altitudes Cloud B.V., Netherlands