Privacy Policy
Last updated: March 19, 2026
1. Data Controller
The data controller responsible for your personal data is:
Santacroce SL
CIF: B13886775
Madrid, Spain
Website: qvault.tech
2. Data We Collect
2.1 Data We DO NOT Collect
- Document content or text
- Detected PII or redaction results
- File names or file metadata
- Any information processed by the desktop or mobile application
- License keys, activation data, or payment information (Qvault is free and open-source)
2.2 Data We Do Collect
Qvault is free and open-source software (MIT License) that runs entirely on your device — desktop and mobile. We do not collect any personal data through the application itself. There are no license keys, no accounts, and no registration. The only data we may collect is through our website:
| Data | Purpose | Legal Basis |
|---|---|---|
| IP address (server logs) | Security and abuse prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
3. How We Use Your Data
- To serve the website and download pages
- To prevent abuse of our web infrastructure
4. Third-Party Processors
We do not use any third-party data processors. We do not sell, rent, or share your personal data with any third parties.
5. Data Retention
- Server logs (IP addresses): Automatically deleted after 90 days.
6. Cookies
Our website (qvault.tech) uses minimal cookies:
- Cookie consent preference: Stores your cookie consent choice (necessary, always active).
- Language preference: Remembers your selected language (necessary, always active).
We do not use analytics tracking cookies or advertising cookies. If this changes in the future, we will update this policy and request your consent through our cookie consent banner.
7. Your Rights Under GDPR
As a data subject in the European Union, you have the following rights:
- Right of Access (Art. 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate personal data.
- Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
- Right to Data Portability (Art. 20): Receive your data in a structured, commonly used format.
- Right to Restriction (Art. 18): Request restriction of processing of your data.
- Right to Object (Art. 21): Object to processing based on legitimate interests.
- Right to Lodge a Complaint: You may file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) at www.aepd.es.
To exercise any of these rights, please contact us using the details in Section 1. We will respond within 30 days.
8. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encrypted communications (HTTPS/TLS) for all website interactions
- Access controls on administrative systems
- Regular security reviews
9. Enterprise Services
For organizations using Qvault Enterprise (MCP pipeline integration, private LLM deployments), additional data processing terms may apply. Enterprise customers receive a separate Data Processing Agreement (DPA). Contact info@santacroce.es for details.
10. Children's Privacy
Qvault is a professional tool designed for legal professionals. We do not knowingly collect data from individuals under the age of 16. If we become aware that we have inadvertently collected such data, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via our website or by email. Continued use of the Software after changes constitutes acceptance of the updated policy.