Privacy Notice

Last updated: 11 July 2026

This Privacy Notice explains how Julian Richards (trading as "MediaVault", "we", "us"), operating getmediavault.com, collects and processes personal data. This page is maintained by Julian Richards to answer common privacy questions about MediaVault.

1. Data controller

Julian Richards is the data controller for personal data processed through MediaVault. You can reach us for privacy matters at privacy@getmediavault.com.

2. Media files stay on your device

MediaVault's core video, audio, and subtitle tools run entirely in your browser via WebAssembly. The media files you drop into the app are not uploaded to our servers and are never stored or examined by us.

3. Categories of personal data we collect

• Account data — email address, hashed password or OAuth identifier when you sign up or log in.
• Subscription data — plan, status, renewal date, and a customer identifier issued by Paddle.
• Support data — messages, attachments, and contact details you send us.
• Usage and device data — IP address, browser, device type, pages viewed, and coarse location, collected via privacy-friendly analytics.
• Cookies — strictly necessary cookies for authentication and session management.

Billing data (card number, billing address, tax ID) is collected and processed directly by Paddle as Merchant of Record — we never see or store your full card details.

4. Purposes and legal bases

• Provide the service (contract): account creation, authentication, subscription management, delivering the tools.
• Security and fraud prevention (legitimate interests): abuse detection, rate limiting, logs.
• Product improvement (legitimate interests): aggregated analytics on which tools are used.
• Customer support (contract / legitimate interests): responding to tickets and emails.
• Legal compliance (legal obligation): tax, accounting, and responding to lawful requests.

5. Sharing and subprocessors

We share personal data only with the following categories of recipients:

• Paddle.com — Merchant of Record for all orders. Paddle handles checkout, payments, tax, invoicing, subscription billing, refunds, and related customer service.
• Hosting and infrastructure providers — for running the website and application backend.
• Email delivery — for authentication, transactional, and support emails from notify.getmediavault.com.
• Analytics providers — for aggregated, privacy-friendly usage statistics.
• Professional advisers — accountants and legal advisers, under confidentiality.
• Authorities — where required by law.

6. International transfers

Some of our providers are located outside the UK/EEA. Where personal data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

7. Retention

• Account data: while your account is active, then up to 12 months after deletion.
• Subscription and billing records: up to 7 years as required by tax law.
• Support conversations: up to 24 months after resolution.
• Analytics: aggregated indefinitely; raw event data up to 12 months.

8. Your rights

Subject to applicable law (including UK/EU GDPR where relevant), you have rights to access, rectify, erase, restrict processing of, port, and object to processing of your personal data, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local data protection authority. We aim to respond within one month. Contact privacy@getmediavault.com.

9. Security

We use appropriate technical and organisational measures including encryption in transit (HTTPS), access controls, principle of least privilege, and regular review of our systems. No system is perfectly secure — please use a strong, unique password.

10. Cookies

We use strictly necessary cookies for authentication and session state, and may use privacy-friendly analytics cookies. We do not use advertising or cross-site tracking cookies. You can control cookies through your browser settings.

11. Changes

We may update this notice from time to time. Material changes will be posted on this page with a new "Last updated" date.