Privacy Policy

VenchLock is operated by GLOBAL VENCHAZ LTD, responsible for personal information processed to provide the service. Contact info@venchlock.com for privacy enquiries and support@venchlock.com for account assistance. This notice describes current functionality; it is not a certification of compliance with every jurisdiction’s laws.

We process information you provide and records created when you use the service.

• Account and security: names, email addresses, authentication/session records, device-verification events, security-code validation records and activity logs.
• Vault and life records: uploaded file contents, titles, categories, notes, tags, dates, reminders, health and emergency information, planning records and document relationships.
• Shared workspaces and Legacy: family/business memberships, permissions, beneficiaries, trusted-contact details, consent, release requests, confirmations, evidence descriptions and audit events.
• AI: questions, conversation history, documents or relevant record metadata used for the feature you request.
• Billing/support: plan, interval, currency, amount, provider transaction references, payment status, receipts, cancellation/refund history and support messages.
• Technical data: browser/device information, network identifiers, page-performance metrics and diagnostic/security logs. Browser storage is described in the Cookie Policy.

Account operation, requested storage, sharing, reminders, support and billing are processed to deliver the service and fulfill our agreement with you. Security, fraud prevention and service reliability may rely on legitimate interests where applicable, subject to your rights. Financial/legal records may be retained to meet legal obligations. Optional marketing requires the applicable permission; subscribing to the newsletter is separate from opening an account.

Some vault, health, emergency and Legacy information is sensitive or concerns other people. Only provide it when you have a lawful right to do so. Where law requires explicit consent or another special-category condition, that condition must apply in addition to an ordinary processing ground. A user’s upload or acceptance of terms is not, by itself, a blanket waiver of privacy rights.

VenchLock uses private storage and account/workspace access controls. Data is transmitted over secure connections; infrastructure provides storage protection. The current document upload implementation does not establish client-side end-to-end or zero-knowledge encryption. Do not interpret the vault as making every document unreadable to infrastructure providers or authorised privileged operations.

Shared content is available to people you authorise under the applicable permissions. Family members’ private Legacy content is not automatically visible to an organizer. Advanced Legacy release follows verified trusted-contact confirmations and administrator evidence review; expiry, failed payment or inactivity must not trigger release or deletion.

Requested AI features send information through Lovable AI to downstream model providers. Depending on the feature, this may include a full uploaded document, extracted content, document metadata, conversation history or derived facts. The payload is not necessarily encrypted so that the AI processor cannot read it. Do not use AI with material you are not permitted to disclose.

The public website assistant sends your questions and conversation history for AI answers and saves that conversation in your browser. It does not access your vault or create a human support ticket. Use Clear chat to remove that browser history. In-app conversations may be saved to your account. Browser voice recognition, where offered, may process audio using your browser/platform provider; review its terms. Biometric unlock uses device/platform authentication: VenchLock does not receive your fingerprint or face template, but stores credential identifiers and protected unlock/session data.

We do not promise a universal no-retention or no-training rule for every downstream AI service. Applicable provider processing, retention and transfer terms should be confirmed for sensitive use; contact info@venchlock.com with questions.

Information may be processed by Lovable Cloud for hosting, database, storage and authentication; Lovable AI and downstream model providers for requested AI; transactional-email services for messages; Paystack for supported payments; and Cloudflare for site performance/security and configured analytics. External sign-in, browser speech and other third-party services apply when you use them. These recipients receive information needed for their functions, not unrestricted customer access.

Payment credentials are entered through the payment provider’s hosted or tokenized flow, not stored as raw card credentials in VenchLock. We retain payment-related records and references. We do not sell your personal information. Information may also be disclosed where legally required or needed for legitimate safety/security obligations.

Operational data is kept as needed for the service, security, dispute resolution and applicable legal duties. You can delete individual documents using available controls and request account deletion at support@venchlock.com. Deletion of a file is not a guarantee that every backup, log, third-party processing record or legally retained billing record is immediately erased.

Legacy audit records are append-only for integrity. Any deletion request must be assessed against legal retention duties and rights, including data concerning other people. Exact backup-purge and provider-retention periods are not established in this notice; request current details at info@venchlock.com. We do not promise an unverified purge timetable.

Hosting, AI, email and payment processing may take place outside your country. The applicable locations, contractual safeguards and transfer grounds must be established for the processing concerned; this notice does not claim that standard contractual clauses or a particular data-residency guarantee are already verified.

Where applicable, privacy law—including Kenya’s Data Protection Act and the EU/UK GDPR where its territorial requirements are met—may give you rights to information, access, correction, erasure, restriction, objection, portability and withdrawal of consent. Rights and exceptions depend on the law and processing. Consent withdrawal does not invalidate earlier lawful processing. You may complain to the competent regulator, such as Kenya’s ODPC or your EU/UK supervisory authority, where relevant.

Send requests to info@venchlock.com. We may verify your identity safely before disclosure or account changes and respond within applicable statutory deadlines. Do not email passwords or security codes.

The service’s minimum account age is 16. Do not create an account if you do not meet applicable age/consent requirements. Adults adding a child’s records must have the necessary authority and respect applicable protections. We may update this notice and communicate material changes through the service or email as appropriate.