Privacy Policy

1. Who is responsible for your data

Nodus Vault is operated in Brazil by Rubens Rodrigues Soto Filho, the controller of personal information handled by the service. For privacy, support, account questions, or rights requests, contact [email protected].

This policy applies to the Nodus Vault website, authenticated web app, backend services, and Chromium browser extension.

2. Information we collect

We collect the information needed to create accounts, save bookmarks, search and organize saved links, provide paid access, prevent abuse, and operate the service.

• Account information: email address, hashed password, email verification status, language, timezone, account status, trial/subscription state, and account timestamps.
• Saved bookmark data: URLs, normalized/canonical URLs, titles, descriptions, authors, publication dates, language, image URLs, notes, tags, collections, highlights, reading/watch/archive status, and related timestamps.
• Optional page content: when you save a page and extraction succeeds, Nodus Vault may store readable page text so search, reader mode, embeddings, and tag suggestions can work. The extension does not save page text unless you choose to save that page.
• Extension-local data: the extension may store an authentication token, connection status, cached tags, recent tag selections, and a limited offline retry queue in Chrome local storage.
• Billing data: Stripe customer and subscription identifiers, billing status, and limited payment-method metadata such as the last four digits returned by Stripe. We do not store full card numbers or card security codes.
• Technical and security data: request metadata such as method, route, status, duration, request id, IP-derived rate-limit signals, user-agent family, timestamps, and error information needed to operate and secure the service.
• Analytics data: after you consent, Google Analytics measures page visits, product usage, device/browser information, and aggregated traffic patterns. It remains disabled before consent and when Global Privacy Control is active.

3. Chrome extension data practices

The extension has a single purpose: saving the current browser page to your Nodus Vault account.

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

• It accesses the active tab only after a user action, such as opening the popup, using the context menu, or pressing the save shortcut.
• It does not collect your complete browsing history.
• It does not use remotely hosted code; extension scripts are packaged with the extension.
• If a save fails because you are offline or the API is unavailable, a sanitized offline queue may be stored locally and retried later. Full page text is removed from offline queue storage.
• Disconnecting, revocation, or reconnecting clears account-derived local extension data such as queue, tags, and recent tag selections.

4. How we use information

• To create and authenticate your account.
• To save, display, organize, search, export, and delete your bookmarks.
• To provide reader, watch, notes, highlights, Daily Check, forgotten-link, tag, collection, and search features.
• To process subscriptions and billing through Stripe.
• To send transactional emails such as verification, password reset, account deletion, and export notifications through Resend.
• To detect abuse, secure accounts, rate-limit sensitive actions, and troubleshoot service issues.
• To measure and improve the website and product using Google Analytics.

5. Search, enrichment, and AI features

Nodus Vault uses a self-hosted Meilisearch index to make your saved data searchable. Search documents may include bookmark URLs, titles, descriptions, page text, tags, collections, notes, platform metadata, and status fields.

For embeddings, semantic recall, and tag suggestions, Nodus Vault sends relevant saved bookmark content through OpenRouter, which routes requests to models in the Google Gemma 4 family for tag suggestions and the Qwen Embedding family for vector generation. Content can include title, description, domain, content type, existing tags, and cleaned page text. The selected infrastructure provider may also process the request. We store embedding vectors and limited usage telemetry, but do not intentionally store raw prompts or raw AI completions in the LLM usage table.

When enriching saved links, the service may request public metadata from the source you saved or related public APIs, such as YouTube, GitHub, Reddit, Hacker News, or oEmbed providers.

6. Service providers and sharing

We share information only as needed to run Nodus Vault, comply with the law, or protect the service. We do not sell personal information.

• Hostinger provides hosting infrastructure.
• Cloudflare sits in front of the hosting environment for traffic routing, security, and availability.
• Resend sends transactional email.
• Stripe handles checkout, subscriptions, invoices, the billing portal, and payment processing.
• Google Analytics provides website and product analytics.
• OpenRouter routes AI requests to selected Gemma 4 and Qwen Embedding model infrastructure when those features are used.
• Public content services may receive the URL or public identifier of a saved item when metadata enrichment is enabled.

7. Legal bases

We use a legal basis that matches each purpose; consent for analytics is separate from accepting the Terms and is not required for the core service.

• Contract: account creation, authentication, bookmark storage, search, core AI features, exports, deletion, support, and billing.
• Legal obligation: tax, accounting, payment, consumer, and legally required response records.
• Legitimate interests: service security, fraud and trial-abuse prevention, reliability, troubleshooting, and legal claims, balanced against user rights.
• Consent: Google Analytics and any future non-essential storage that requires permission. Consent may be withdrawn at any time.

8. Retention

• Account and saved bookmark data are kept while your account is active, unless you delete specific items or delete your account.
• A trial account is locked when its trial expires and automatically deleted 30 days after the trial end unless it is reactivated before the scheduled date.
• You may request a data export from the app. Export archives are made available through signed download links for a limited time.
• If you request account deletion, live account data is deleted after password verification. Temporary archives, infrastructure logs, and backups are removed or expire under operator retention procedures and may be isolated until their normal rotation completes.
• Account deletion cancels active Stripe billing, expires a pending Checkout Session, and deletes the Stripe Customer record, which removes saved card details. Stripe may retain transaction records when required for financial, fraud-prevention, dispute, or legal obligations.
• Technical logs are kept only as long as reasonably necessary for operation, security, abuse investigations, and legal obligations; infrastructure retention is configured separately from the app database.
• Trial-abuse records store HMAC hashes rather than raw identifiers and are automatically purged when their configured retention date expires.
• Extension-local data remains in your browser until you disconnect, reconnect, revoke the token, clear extension storage, or uninstall the extension.

9. Your rights and choices

Depending on your location, you may have rights to access, confirm processing, correct, export, delete, restrict, or object to the use of your personal information. You may also have rights under Brazil’s LGPD and applicable United States privacy laws.

• Use the app’s export control for account details, bookmarks and page text, tags, collections, highlights, preferences, tag suggestions, and limited AI usage records belonging to your authenticated account. Passwords, tokens, security hashes, raw billing webhooks, search vectors, and other users’ data are excluded.
• Use the account deletion control to delete your account.
• Contact [email protected] to ask privacy questions or exercise rights not available directly in the app.
• Accept, reject, or revoke Google Analytics through Privacy preferences. Global Privacy Control is honored as an analytics rejection.
• Nodus Vault does not sell personal information or use it for cross-context behavioral advertising.
• We honor Global Privacy Control for analytics. Because browser Do Not Track has no uniform legal standard, we do not interpret DNT alone as a request, but you can use our preference control or contact us.

10. Security and international processing

We use technical and organizational safeguards such as hashed passwords, token peppering, limited extension permissions, rate limits, signed export links, and access controls. No system is perfectly secure, so please use a strong unique password and contact us if you suspect unauthorized access.

Nodus Vault is operated from Brazil and uses service providers that may process information in Brazil, the United States, and other countries where they operate.

11. Children

Nodus Vault is only for people aged 18 or older. Signup requires an unchecked declaration of age and acceptance of the current Terms. We do not request a birth date or identity document for this declaration.

12. Changes and contact

We may update this policy as the product, providers, or legal requirements change. If a change is material, we will take reasonable steps to notify users through the product or another appropriate channel.

Questions or requests: [email protected].