Vaultara Exchange Privacy Policy

Information we handle

• Account information such as email, display name and authentication/session data.
• Marketplace information such as listings, bids, orders, shipping/tracking, disputes, ratings, favorites and saved searches.
• Seller information needed for payouts and compliance. Bank-account, identity and tax verification used for Stripe Connect is handled through Stripe; Vaultara does not ask sellers to type full bank-account or tax-ID numbers into ordinary Vaultara forms.
• Collector content such as coin photos, collection records, profile photos, bios, messages and trade offers.
• Technical and anti-fraud records such as timestamps, acceptance records, browser/user-agent information, security/event logs, hashed network identifiers, and limited-retention IP address evidence. Vaultara may use these signals to investigate fraud, ban evasion, suspicious selling, counterfeit concerns, account abuse, and related marketplace risk.

How information is used

Vaultara uses information to provide accounts and transactions, process payments and payouts, show public listings and galleries, operate messaging and notifications, investigate disputes or suspicious activity, prevent fraud, enforce marketplace rules, calculate seller compliance screens and satisfy legal obligations.

Service providers

Vaultara relies on service providers to operate the platform. These currently include Hatchable for hosting, storage and authentication; Stripe for checkout, payment processing and seller payouts; and Google-powered AI services for coin-image analysis when a user chooses AI scanning. Market spot-price requests are used to display precious-metal reference prices and are not intended to include user personal information.

Public information

Marketplace listings, seller/collector display names, seller ratings and content intentionally marked public may be visible without signing in. Collection items marked private or friends-only are not intended for general public display. Certain seller identity/contact details may have to be disclosed when marketplace law requires it.

Payments and sensitive financial information

Payment-card entry occurs in Stripe-hosted checkout. Seller banking and identity onboarding occurs through Stripe Connect. Vaultara receives transaction and account-status information needed to operate the marketplace, but the ordinary Vaultara user interface is not designed to store full payment-card numbers, bank-account numbers or tax IDs.

AI photo processing

When you choose AI coin scanning, the coin images and related prompts needed to perform the scan may be sent to the AI service for processing. Avoid photographing unrelated documents, addresses or other personal information beside a coin.

Data sharing

Vaultara may share information with service providers that process it for platform operations, with a buyer or seller when needed to complete a transaction, or when reasonably necessary for fraud prevention, legal process, safety, dispute handling or regulatory compliance. Where legally permitted or required, Vaultara may preserve or disclose relevant account, transaction, network/IP, shipping, communication, and security records in response to valid legal process or an appropriate emergency request. Vaultara does not currently sell personal information for money or operate a third-party behavioral advertising marketplace.

Retention and security

Records may be retained for as long as reasonably needed for transactions, disputes, fraud prevention, accounting, legal obligations and platform security. Operational shipping name, address and email fields are scheduled for redaction 180 days after all shipments on an order are delivered and the protection window has expired, provided there is no open dispute or unresolved recovery requiring them. Core transaction records such as order amounts, item snapshots, timestamps, tracking history and accounting records may remain longer when needed. No internet service can promise absolute security. Vaultara uses platform authentication, access controls and payment-provider separation to reduce exposure of sensitive payment data.

Your choices

You can control collection-item visibility, edit certain profile/listing information, and remove some user-created content through the available account tools. Some transaction, acceptance, dispute, fraud-prevention and compliance records may need to be retained even after content is removed.