← Home
VAULT®
Terms Privacy Inbox →
Legal · 01

Privacy.

When you interact with Vault, we collect what we need to do business with you. Nothing more, nothing kept past usefulness.

Last updated · January 1, 2026 Effective · January 1, 2026 Reading time · 8 minutes
Contents
  1. The short version
  2. Who we are
  3. What we collect
  4. How we use it
  5. Who we share with
  6. Your rights
  7. Data retention
  8. International transfers
  9. Children
  10. Changes
  11. Contact
Placeholder · Not Yet Lawyered This document is a structural draft of Vault's privacy practices. Numbers, retention windows, and enumerated rights should be reviewed by counsel before this page is held out as Vault's official policy. Replace this banner before going live.

01The short version

Vault Management LLC ("Vault," "we," "us") collects only the personal information needed to run a creator and brand-side talent agency: your name, contact details, the social handles and brand history you give us when you apply or send a brief, and the bare minimum of website analytics required to keep the site honest.

We don't sell your personal information. We don't share it with advertisers. We don't run profile-based ad networks. If you ask us to delete what we have, we will — subject to whatever we're legally required to keep.

The rest of this page is the long version. Read it if you'd like the specifics.

02Who we are

Vault Management LLC is a Delaware limited liability company with operating offices in Los Angeles and Austin. We are the data controller for any personal information you share with Vault through this site, our application forms, our partnership intake, or our newsletter.

Privacy questions, requests, and complaints all go to a real human:

Email
privacy@vaultmgt.com
Mail
Vault Management LLC, c/o Privacy, 1234 Operator Lane, Los Angeles, CA 90001
Response
Within 30 days of receipt, every time.

03What we collect

We group personal information into the categories below. We collect it from you directly — nothing is bought from a third-party data broker.

Information you give us

  • Creator applications — full name, email, city, phone (optional), primary social platform and handle, audience size band, the contents of your "Why Vault" textarea.
  • Brand inquiries — brand name, your name, work email, phone (optional), budget band, timeline, the brief you send us.
  • Newsletter — your email address.
  • Direct correspondence — anything you send to one of our @vaultmgt.com inboxes.

Information we collect automatically

  • Web logs — IP address (truncated for analytics), user agent, referrer, requested URLs and timestamps. Logged by our hosting provider and retained for 14 days for security.
  • Cookies — see our Cookie Policy for the limited list. We do not use third-party advertising cookies.

What we don't collect

  • Government-issued ID numbers (we never ask for them online).
  • Banking or payment card details (talent payments and brand invoicing happen through separate, audited systems).
  • Special-category data — race, religion, health, sexual orientation, biometric identifiers — unless you volunteer it in correspondence.

04How we use it

We use the information you give us to do the things you'd expect Vault to do:

  • Review your creator application or brand brief and respond to it.
  • Match creators with brand opportunities and vice versa — only after both sides explicitly opt in to the introduction.
  • Send the newsletter, if you subscribed. You can unsubscribe with one click from any issue.
  • Operate, secure, and improve the site.
  • Comply with our legal obligations and enforce our Terms.

We do not use your information for behavioral advertising, automated decision-making with legal effects, or any purpose materially different from what's in this list. If we ever want to, we will update this page first and ask for your consent where the law requires.

05Who we share with

The categories below are the only ones we share personal information with. Each shares is bound by a written contract that limits use to the purposes Vault directs.

Service providers

  • Hosting and content delivery (Cloudflare).
  • Email infrastructure (transactional and newsletter).
  • Customer relationship and pipeline tools used by our operators.
  • Document execution and contract storage.

Talent and brand counterparties

If you apply as a creator and we matched you with a brand, we share the parts of your application required to evaluate the partnership — and only after you confirm in writing that we may. Same in reverse for brand briefs.

Legal authorities

If law enforcement or a court issues a valid, lawful demand, we comply with the minimum required and notify you where we're permitted to.

Acquirers

If Vault is acquired, merged, or undergoes a change of control, your personal information may be transferred to the acquirer. We will notify you in advance and you will retain the same rights you had before the change.

06Your rights

Depending on where you live, you have some or all of the following rights over the personal information we hold about you. To exercise any of them, email privacy@vaultmgt.com from the address we have on file (or with enough information for us to verify it's you).

  • Access — a copy of what we have about you.
  • Correction — fix anything that's wrong.
  • Deletion — delete it, subject to retention obligations described in §07.
  • Portability — receive your data in a machine-readable format.
  • Opt-out of sale or sharing — we don't sell or share for cross-context behavioral advertising, but you have the right to confirm.
  • Withdraw consent — for anything you previously opted into (notably the newsletter).
  • Non-discrimination — exercising your rights will never affect how Vault treats you as a creator or brand partner.

If you live in the EU, the UK, or another GDPR-style jurisdiction, you also have the right to lodge a complaint with your local data protection authority if you believe we've handled your information improperly. We'd appreciate a chance to fix it first.

07Data retention

We keep personal information only as long as it's reasonably needed for the purposes in §04, plus a tail for legal and contractual obligations. Concretely:

Applications & briefs
Active for the duration of the creator or brand relationship; archived for 3 years after the relationship ends.
Newsletter
Until you unsubscribe, plus a 12-month suppression list to make sure we don't accidentally re-add you.
Correspondence
3 years from last contact, then deleted.
Web logs
14 days, then aggregated.
Tax, audit, financial records
7 years, where required by US tax law.

08International transfers

Vault is based in the United States and operates entirely from the US. If you're in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction with cross-border-transfer rules, your information will be transferred to and processed in the US.

For those transfers we rely on the European Commission's Standard Contractual Clauses and the UK's International Data Transfer Addendum, supplemented by appropriate technical and organizational measures. A copy of the SCCs is available on request.

09Children

Vault's services are intended for adults working in or with the creator economy. We do not knowingly collect personal information from anyone under 18. If you believe a child has submitted information to us, email privacy@vaultmgt.com and we will delete it.

10Changes

We update this page when our practices change. The "last updated" date at the top reflects the most recent change. Material changes will be announced in the newsletter and at the top of this page for 30 days before they take effect.

11Contact

For anything privacy-related, write to privacy@vaultmgt.com. For anything else, the directory is on the home page.

If you've read this far, thank you. We try to be the kind of company you don't have to read a privacy policy to trust.
©2026 Vault Management LLC
Home Terms Cookies FTC Accessibility