Paid folder privacy
LockItVault · Effective 2026-10-08
901 E. Saint Louis Street, Suite 705, Springfield, MO 65806, United States · webmaster@lockitvault.com
This supplement explains information used for paid folder purchases and creator sales. The general LockItVault Privacy Policy also applies.
Purchase and access records
We process verified buyer email and linked account identity, creator and payment-account references, offers and accepted prices, payment and tax metadata, subscription status, paid-through dates, cancellation, consent wording and document versions, access logs and usage, refunds, disputes, and support records. These records let us deliver access, administer payments, prevent unauthorized access and duplicate reimbursement, reconcile transactions, resolve disputes, and meet applicable obligations.
Stripe
Stripe handles buyer payment details and creator identity verification, bank information, and payouts through its hosted services. LockItVault receives the references and statuses needed to administer purchases. Creators do not submit bank details or identity documents through LockItVault commerce forms.
Information creators receive
A creator sees the purchase and renewal status, paid-through date, applicable download permission, and refund or dispute information for their own offers, with a masked buyer email in the LockItVault creator dashboard. Purchases use direct charges on the creator's Stripe account, where the creator can access your full buyer email, any name, contact or billing details you provide to Stripe for that purchase, and limited payment information Stripe makes available. Creators do not receive full card details, biometric enrollment information, another creator’s purchase history, unrelated vault contents, or unrelated storage subscription records. Private prices and invitation recipient details are protected from public pages and APIs.
Retention and privacy requests
The following retention periods apply to paid-folder commerce. Mandatory rights, unresolved paid access, refunds, disputes, financial obligations, and legal holds take precedence over a scheduled review date. Reaching a date does not automatically delete a record.
| Records | Retention |
|---|---|
| Original purchase terms, renewal authorization, electronic-delivery consent, and associated agreement and notice evidence | At least three calendar years after acceptance or one calendar year after verified agreement termination, whichever is later. Keep longer where an unresolved obligation or legal hold requires it. |
| Payment, fee, refund, dispute, ledger, and refund-funding records | Seven calendar years after the last financial entry associated with the purchase, or longer where an unresolved obligation or legal hold requires it. This is our business retention policy, not a claim that every jurisdiction mandates seven years. |
| Original verified identity and recipient binding needed to establish the accepted agreement | Retain with the associated agreement evidence under the same three-year or one-year later period. A replacement email does not rewrite the original accepted quote or consent. |
We review access, security, usage, and support records according to their purpose and applicable obligations, retaining them only as needed to deliver the service, resolve an open matter, preserve required evidence, or comply with law. These review periods do not authorize erasure of immutable financial or consent history.
Contact webmaster@lockitvault.com to request access, export, correction, deletion, a free paper copy, electronic-delivery withdrawal, or help with your verified email. Requests are handled by support. Our service targets are acknowledgment by the next business day and a response or explained determination within 30 calendar days of the original receipt. Any shorter applicable deadline controls. Proportionate identity checks do not restart the receipt date; an extension requires a recorded legal basis and timely notice.
Use Manage access online to stop future renewals immediately. A support message alone cannot guarantee stopping an imminent charge. Cancellation, withdrawal, or deletion does not erase records we must retain or remove existing prepaid-access and remedy obligations. A new email must be verified separately; future billing remains stopped until a supported new acceptance or prospective consent update is complete.
Paid-folder content security
Paid-folder content and private previews are processed through private storage and server-managed encryption keys. LockItVault servers can decrypt content to provide authorized access; this delivery model is not client-side end-to-end encryption or zero-knowledge storage. Access ends when the purchase expires or is revoked, but files, screenshots, or decryption material already obtained cannot reliably be retracted.
Communications
Purchase receipts, verification, required reminders, payment failures, cancellation, refunds, and service-interruption notices are transactional. A purchase does not subscribe you to unrelated marketing. Marketing permission is separate. Before a recurring folder purchase, we present separate Electronic Delivery Terms and ask you to affirmatively choose required transactional notices at your verified email address. This initially unchecked agreement is separate from accepting the purchase terms and authorizing recurring charges. It does not subscribe you to marketing. You may decline before purchasing. The Electronic Delivery Terms explain how to access and save the records, request a free paper copy, update your verified email, and withdraw electronic-delivery consent prospectively. A one-time purchase does not require this recurring-purchase control.