NestVault ("NestVault," "we," "us," or "our") is operated by Sutherlin Ventures LLC dba NestVault, a California limited liability company. We operate the website MyNestVault.com and all related products and services (collectively, the "Service").
Contact: [email protected] · MyNestVault.com · Anaheim, California
This Privacy Policy describes how we collect, use, store, and protect information when you use NestVault. It also describes your rights regarding that information. By using the Service, you agree to the practices described in this policy.
NestVault uses zero-knowledge encryption architecture for vault contents. This means:
The encryption standard used is AES-256. We do not have the ability to decrypt your vault contents and cannot provide them to third parties, government agencies, or any other entity in readable form.
Important: At vault setup we issue you a one-time recovery code, which you alone hold. You may use that recovery code to regain access if you forget your vault password. NestVault does not retain a copy of your vault password or your recovery code and cannot reset, recover, or reconstruct either on your behalf. If you lose both your vault password and your recovery code, your encrypted data will be permanently inaccessible. We are not liable for data loss resulting from lost credentials.
We use the information we collect to:
We do not use your information for advertising, and we do not sell your information to third parties. Ever.
We share information only in the following limited circumstances:
We use third-party vendors to operate the Service, including:
These vendors are contractually prohibited from using your information for any purpose other than providing services to us.
We may disclose information if required by law, court order, or governmental authority. Because we cannot decrypt vault contents, we cannot provide them in readable form regardless of legal demand.
In the event of a merger, acquisition, or sale of assets, user data would be transferred to the successor entity. We will notify users before this occurs.
We do not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes.
A verified beneficiary release system is in development and is not yet available. We are designing a process by which a designated beneficiary would be able to request vault access upon verified death. This section will be updated to describe the full data handling process, including what information beneficiaries must provide, how it is verified, how long it is retained, and how it is deleted, once the system launches.
Current vault access is a living-access feature only. The Family Access feature allows the primary vault holder to invite designated family members to view specific vault categories during the holder's lifetime, under the holder's control. This is not a posthumous release mechanism.
Because NestVault uses zero-knowledge encryption, we do not hold the key that decrypts vault contents. We cannot grant vault access on behalf of a beneficiary or anyone else, regardless of documentation presented, until a purpose-built system exists that addresses this architectural constraint.
We will notify all current subscribers by email before the beneficiary release system launches, along with the updated privacy terms that will govern it. Until then, subscribers are responsible for sharing vault access instructions directly with anyone they wish to inherit access, through an attorney, estate plan, or other arrangement of their choosing.
You have the right to:
To exercise these rights, contact: [email protected]
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a CCPA rights request: [email protected]. We will respond within 45 days.
We implement industry-standard security measures including:
No system is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law.
NestVault is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact [email protected] and we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy?