Privacy Policy

1. Who we are

LinkVault Professional is operated by PV-Electronic (sole proprietorship), Gantrischweg 5, CH-3250 Lyss, Switzerland. Legal contact: info@pve.ch. Product support: linkvault@pve.ch.

2. What data we collect

When you create an account and use LinkVault Professional, we collect:

• Account information — email address and display name provided via Google or Apple OAuth.
• Links and metadata — URLs, titles, tags, categories, and notes you save.
• Device information — device model, OS version, and a unique installation identifier for sync purposes.
• Usage events — basic sync timestamps and error logs to diagnose issues.

We do not collect: browsing history, keystrokes, clipboard contents (beyond what you explicitly share), or precise location.

3. How we use your data

We use the data we collect solely to:

• Authenticate your account and maintain your session.
• Sync your links across devices.
• Extract metadata (title, description, thumbnail) from URLs you submit to improve your library entries.
• Diagnose errors and improve application performance.
• Optional AI enrichment (title, summary, tags, category) — only after you allow it in the in-app dialog, and never for items you mark private.

We do not use your data for advertising, behavioral profiling, or any purpose beyond operating LinkVault Professional.

4. Data storage, cookies, and security

Your data is stored in Supabase (PostgreSQL) hosted in the EU. All data is protected by:

• Row-Level Security (RLS) — your links are only accessible to your authenticated account.
• TLS encryption in transit for all API communications.
• Encrypted credentials stored in your device's secure storage (Keychain on iOS, Keystore on Android).

On your device, links are stored in a local SQLite database accessible only to the LinkVault Professional app. On the marketing site and web app, we also use strictly functional browser storage (see below).

• Functional cookie (web app) — lv_webapp_session (HttpOnly): holds your signed-in session so you stay logged in. Set only after you sign in; cleared on logout.
• Functional localStorage — theme preference (lv-theme), language preference, active workspace id, and link-sort preference. These stay in your browser and are not used for advertising or analytics.
• Hosting logs — our hosting providers may process technical access data (e.g. IP address, user agent, timestamps) for security and reliability.

5. Data sharing

We do not sell or rent your personal data. We share data with processors only as needed to run the product:

• Supabase — database and authentication (EU hosting; data processor).
• Google / Apple — OAuth sign-in only. We receive your name and email; no passwords.
• Google Cloud Run (EU) — LinkVault API / content processing backend (data processor).
• Vercel — hosts the marketing site and Next.js web app (access logs as above).
• OpenRouter — optional AI enrichment, only after you consent in the in-app dialog: for links, the URL/page text; for images and documents you upload, the full file content. OpenRouter routes requests to OpenAI-family models (text), Google Gemini (images), or Mistral (document OCR) per their privacy policy. Nothing is sent if you decline or turn AI off in Settings.
• Legal requirements — if required by law or a valid legal process.
• Google Preferred Sources — optional button on the public marketing site. If you use it, Google’s script loads so you can mark this domain as a preferred source in Search. See Google’s publisher guide.

6. Data retention and deletion

You can delete your account and all associated cloud data at any time from the LinkVault Professional app settings (Account → Delete Account). Deletion is permanent and irreversible. Local data on your device is removed when you uninstall the app.

7. Browser extension

The LinkVault Professional browser extension reads the active tab URL and title when you save, and may extract page metadata (such as Open Graph fields) from that tab on your request. It does not read your full browsing history or monitor background tabs.

8. Children's privacy

LinkVault Professional is not directed at children under 13. We do not knowingly collect personal data from children.

9. Changes to this policy

We may update this policy as the app evolves. Material changes will be communicated via in-app notification. Continued use after changes constitutes acceptance.

10. Contact

For privacy questions or data requests, email info@pve.ch or linkvault@pve.ch, or see Contact & Impressum.