Privacy & Security Covenant

I. The Sanctity of Your Words

At Time Machine Vault (TMV), we believe your privacy is not just a policy, but a sacred trust. Every capsule is encrypted with AES-256 before it is stored, under a key unique to that capsule, which is held in a separate managed key service and never stored beside the message it opens. A stolen database, backup or console session yields nothing readable.

We want to be exact about the limit of that, because the distinction matters and is often blurred. This is not end-to-end encryption. TMV holds the keys, because a capsule has to be delivered years from now to someone who was never given a password, and a person who has died cannot supply one. So our systems can decrypt your words, and a lawful order compelling us to could reach them. What encryption rules out is everyone else: anyone who obtains the database, a backup, or a copy of the storage.

II. Data We Collect

To provide our services, we collect minimal data:

• Identity: Name and email address used for authentication and account security.
• Guardian Info: Contact details for those you appoint to decide whether your messages should be delivered.
• Encrypted Payload: We store your encrypted messages, but our system cannot "see" inside them.
• Verification Meta: Basic logs of login activity and payment history to maintain vault continuity.

III. Guardian & Recipient Privacy

Information regarding your recipients and guardians is stored with the same level of security. Recipients are never notified of a capsule's existence until the moment of delivery, ensuring your privacy remains intact during your lifetime. Guardians are notified only of their role and are contacted only when verification is required.

IV. Third-Party Policy

We do not sell, trade, or share your data with advertisers or third parties. Your information is used exclusively for the maintenance and eventual fulfillment of your legacy vault.

V. Your Right to Erasure

You maintain full control over your vault. At any time prior to your passing, you may edit or delete your capsules, remove guardians, or choose to delete your entire vault and all associated data permanently.