SVAULT Open app
← Back to SVAULT
Legal / Privacy

Privacy Policy

Effective and last updated: June 25, 2026

Plain-language summary

SVAULT is designed to encrypt credential records in your browser before ledger operations are prepared. Badje does not intend to receive readable vault content or your database secret through the normal application flow. Information submitted to a public Stellar network may be publicly visible, widely replicated and effectively permanent, even when the record payload is encrypted.

1. Scope and operator

This Privacy Policy explains how Badje, the creator and operator of SVAULT, handles information in connection with:

  • the informational website at svault.ir;
  • the web application at app.svault.ir;
  • emails and other direct communications about support, investment, partnerships, security reports or donations.

For privacy questions, requests or complaints, contact tooraj.valaee@live.com.

2. Information processed

2.1 Information you provide directly

When you contact Badje, you may provide your name, email address, organization, message contents, technical details, investment or partnership interests, and any attachments or other information you choose to send.

2.2 Website and hosting data

The hosting and network infrastructure may automatically process technical information such as IP address, browser and device type, requested URL, date and time, referring page, response status and security events. This information is used to deliver the site, diagnose failures, prevent abuse and protect the service.

2.3 SVAULT record content and secrets

SVAULT is designed so that credential fields you enter—such as title, username, URL, secret, notes and tags—are processed and encrypted in the browser before ledger chunks are prepared. Under the intended production architecture, Badje does not intentionally receive the readable record content or database secret through the normal app workflow.

Your browser may temporarily hold decrypted information and the database secret in memory while the active session is open. Closing or refreshing the app may require you to enter the database secret again. Browser behavior, extensions, device compromise and implementation changes can affect this protection.

2.4 Local browser storage

SVAULT may use browser storage for functional settings such as selected network, interface preferences or installation-related information. The website does not intentionally use advertising cookies, cross-site tracking pixels or behavioral advertising technologies at the time of this policy.

3. Stellar and public-ledger data

When you approve a commit, the selected Stellar environment may receive encrypted record chunks and transaction-related information, including public account addresses, transaction hash, ledger sequence, operation details, fees, reserve changes and timestamps.

Public Stellar network data is public. Anyone may be able to inspect, copy, index and analyze it. Public-ledger information is replicated across network participants and generally cannot be deleted or changed by Badje. Encryption reduces readability of the record payload, but public metadata can still reveal patterns such as account activity, timing and transaction relationships.

If you connect SVAULT to a custom or private Stellar network, the operator of that network determines its logging, access, retention and privacy practices. Badje does not control third-party or user-configured networks.

4. How information is used

Badje may use information to:

  • provide, operate, secure and troubleshoot the website and application;
  • respond to support requests, security reports, investment inquiries, partnership proposals and donation-related messages;
  • detect misuse, fraud, attacks or technical failures;
  • improve product reliability, usability, documentation and security;
  • comply with legal obligations and protect users, Badje and third parties.

Where a legal basis is required, processing may rely on performance of a requested service, legitimate interests in operating and securing SVAULT, consent for optional communications, or compliance with legal obligations.

5. Sharing and service providers

Badje does not sell personal information and does not use vault content for advertising. Information may be disclosed to:

  • hosting, content-delivery, email and security providers that help operate the service;
  • Stellar network nodes, Horizon/RPC endpoints, explorers and other infrastructure selected or required to submit and inspect transactions;
  • professional advisers where reasonably necessary;
  • authorities or other parties when required by law or necessary to protect rights, safety and service integrity;
  • a successor organization in connection with a merger, financing, acquisition or transfer of the project, subject to appropriate safeguards.

Third-party services operate under their own terms and privacy practices. You should review them before using a network, explorer or endpoint.

6. International processing

The internet, email providers and distributed networks may process information in multiple countries. Public Stellar ledger data is replicated internationally. Where required, Badje will use reasonable contractual or legal safeguards for service-provider transfers, but cannot restrict the geographic replication of public blockchain data.

7. Retention and deletion

  • Direct communications: kept for as long as needed to answer the request, maintain an active relationship, protect legal interests or meet legal obligations.
  • Technical logs: retained for the shortest period reasonably needed for delivery, security, abuse prevention and troubleshooting, subject to hosting-provider configuration and legal requirements.
  • Browser data: remains under your browser and device controls unless the data is submitted to a network.
  • Public-ledger data: may remain available indefinitely and cannot ordinarily be erased by Badje.

Deleting local browser data does not delete information already submitted to a Stellar network.

8. Your choices and privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent or information about disclosures. You may also have the right to complain to a privacy regulator.

Send requests to tooraj.valaee@live.com. Badje may need to verify your identity and may retain limited information when required by law or needed to protect legal rights.

These rights cannot always be applied to data on a public blockchain because Badje may not control the network and the ledger may be technically immutable.

9. Security and limitations

Badje uses reasonable technical and organizational measures intended to protect the service. SVAULT's security model includes local encryption and an explicit approval step, but no system is completely secure.

You are responsible for protecting your database secret, signing keys, device, browser profile, backups and selected network. Badje cannot recover a lost database secret and cannot fully protect you from malware, malicious extensions, phishing, compromised devices, weak backups or unsafe custom networks.

10. Children

SVAULT is not directed to children under 18 and Badje does not knowingly request personal information from children. If you believe a child has provided information directly to Badje, contact us so the request can be reviewed.

11. Changes to this policy

Badje may update this Privacy Policy when the product, architecture, providers or legal obligations change. The updated date will be shown at the top. Material changes may also be announced on the website or inside the application.

12. Contact

Operator: Badje
Product: SVAULT
Website: badje.ir
Email: tooraj.valaee@live.com