Last updated: September 3, 2026
Who we are. Vaulte AI ("Vaulte", "we"), 350 Rue de Louvain O, Montréal QC H2N 2E8, Canada, provides managed AI assistants as described below. We provide managed AI assistants that answer and qualify WhatsApp messages on behalf of the businesses that subscribe to our service ("Clients").
Person responsible for personal information. Under Québec's Act respecting the protection of personal information in the private sector (Law 25), the person in charge of the protection of personal information at Vaulte is the founder, reachable at hello@vaulte.ai. Direct any access, correction, deletion, or complaint request there.
What we collect from Clients. Name, business name, email, phone number, billing details (processed by Stripe — we never store card numbers), your WhatsApp Business account identifiers, and the configuration you give us for your assistant.
What we collect from your customers. When someone messages a Client's WhatsApp number, we receive their phone number, display name, message content, and any photos or voice notes they send. Voice notes may be transcribed to text so the assistant can respond. This data is processed on behalf of the Client, who is the controller of their customer relationships; we act as their service provider.
How we use it. To generate replies, send lead summaries and appointment notices to the Client, remember returning customers so they don't repeat themselves, provide analytics to the Client, bill for the service, and secure the platform. We do not sell personal information and we do not use customer conversations to advertise to those customers.
Service providers. Messages are transmitted through Meta's WhatsApp Cloud API. AI replies and summaries are generated using Anthropic's API; voice transcription uses OpenAI's API. Data is stored with Supabase and our application runs on Railway. Transactional email is sent via Resend and billing runs on Stripe. These providers may process data outside Québec and Canada, including in the United States; we rely on their contractual and security commitments for such transfers.
Retention. Conversation transcripts, lead summaries, and customer memory are kept for as long as the Client's account is active so the assistant can recognise returning customers. When a Client cancels, their data is deleted within 90 days unless we are required by law to keep it longer. Audit and security logs are kept for 12 months.
Your rights. Anyone whose information we hold may ask to access it, correct it, have it deleted, or withdraw consent, and may ask for a copy in a structured format. We answer within 30 days. If you are the customer of one of our Clients, you may contact either the Client or us. You may also file a complaint with the Commission d'accès à l'information du Québec.
Security. Data is encrypted in transit, provider credentials are never exposed to browsers, administrative access is password-protected with optional two-factor authentication, and administrative actions are logged. If a confidentiality incident presents a risk of serious injury, we will notify the affected persons and the Commission d'accès à l'information as required by law.
Cookies. vaulte.ai uses only a local setting to remember your light/dark theme preference. We do not use advertising or tracking cookies.
Changes. We will post any changes here and update the date above.
Contact: hello@vaulte.ai
← Back to vaulte.ai