NestVault ("NestVault," "we," "us," or "our") is operated by Sutherlin Ventures LLC dba NestVault, a California limited liability company. We operate the website MyNestVault.com and all related products and services (collectively, the "Service").
Contact: hello@mynestvault.com · MyNestVault.com · Anaheim, California
This Privacy Policy describes how we collect, use, store, and protect information when you use NestVault. It also describes your rights regarding that information. By using the Service, you agree to the practices described in this policy.
NestVault uses zero-knowledge encryption architecture for vault contents. This means:
The encryption standard used is AES-256. We do not have the ability to decrypt your vault contents and cannot provide them to third parties, government agencies, or any other entity in readable form.
Important: At vault setup we issue you a one-time recovery code, which you alone hold. You may use that recovery code to regain access if you forget your vault password. NestVault does not retain a copy of your vault password or your recovery code and cannot reset, recover, or reconstruct either on your behalf. If you lose both your vault password and your recovery code, your encrypted data will be permanently inaccessible. We are not liable for data loss resulting from lost credentials.
We use the information we collect to:
We do not use your information for advertising, and we do not sell your information to third parties. Ever.
We share information only in the following limited circumstances:
We use third-party vendors to operate the Service, including:
These vendors are contractually prohibited from using your information for any purpose other than providing services to us.
We may disclose information if required by law, court order, or governmental authority. Because we cannot decrypt vault contents, we cannot provide them in readable form regardless of legal demand.
In the event of a merger, acquisition, or sale of assets, user data would be transferred to the successor entity. We will notify users before this occurs.
We do not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes.
NestVault lets a vault holder share access with household members during their lifetime, through the Family Access feature. Each household member has their own NestVault account and their own encrypted copy of the vault key, created by the vault holder at the time the member is added. A household member can access the shared vault at any time using their own credentials, and the vault holder can revoke a member's future access at any time.
Because NestVault uses zero-knowledge encryption, we do not hold the key that decrypts vault contents and cannot read them ourselves. We cannot unlock a vault for anyone — including a household member, or a family member of a deceased vault holder. Access is available only to household members the vault holder added in advance, or to a person the vault holder has separately entrusted with the vault password or recovery code.
NestVault does not operate an automated or posthumous vault-release process. We do not collect death certificates, government identification, or similar documentation, and we do not decrypt or hand over vault contents on any trigger. Any access to a vault after the holder's death depends entirely on the arrangements the holder made while alive.
You have the right to:
To exercise these rights, contact: hello@mynestvault.com
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
To submit a CCPA rights request: hello@mynestvault.com. We will respond within 45 days.
We implement industry-standard security measures including:
No system is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law.
NestVault is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact hello@mynestvault.com and we will delete it promptly.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 30 days before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
Questions about this Privacy Policy?