1. Core Privacy Commitment & Operator

This Privacy Policy details how Ghostline Digital (referred to as "we", "us", or "our"), founded by Steven Lamotte Jr., collects, uses, secures, and discloses user information when you access the VaultFrame platform.

2. Information We Collect

We restrict data collection to what is technically necessary to operate your workspace:

• Account Information: Emails, passwords (cryptographically hashed), workspace settings, and organization parameters.
• Uploaded Content: File attributes (file size, file type, checksum keys) and the raw assets stored securely within our Cloudflare R2 bucket.
• System Logs & Usage Metadata: Action timelines (login audits, upload counts, version changes, bulk updates) logged to ensure tenant protection and workspace activity tracking.

3. Cookies & Local Storage

We use functional, authentication-based cookies and local storage tokens to preserve your login session, track active organization IDs, and save recent search preferences (e.g. Command Palette query history). These are strictly necessary for platform operation. For detailed specifications, please review our Cookie Policy.

4. Data Processing & Infrastructure

VaultFrame utilizes secure, isolated third-party cloud infrastructure providers to host systems and media assets:

• Neon Database Serverless: Hosts primary organization relational tables and indexes in the United States (us-east-1).
• Cloudflare R2 Object Storage: Hosts binary assets, thumbnails, and preview structures.
• Vercel Edge Platform: Hosts deployment serverless functions and CDN routing.

5. Security Practices

We deploy secure architectural safeguards to protect your workspace:

• Encryption: Data is encrypted in transit using Transport Layer Security (TLS 1.3) and at rest on R2 and Neon databases.
• Tenant Isolation: Rigorous query verification ensures assets and query actions are restricted by organization IDs.
• Access Audits: We log every authentication attempt (including failures) to track malicious behaviors.

6. Data Retention & Deletion

We store account records and binary files for the duration of your active workspace lifecycle. If you or your organization owner decides to delete an asset or remove your workspace database structure, all associated metadata entries are purged from the primary Neon DB, and we initiate deletion calls to Cloudflare R2 storage containers.

7. User Rights

Depending on your geographic jurisdiction, you have the right to access, download, correct, or request the permanent deletion of your personal account records.