Enigma Vault Privacy Policy

Last updated: September 27, 2026

This privacy policy describes how we collect, use, and handle your data when you use our Enigma Vault API (Card Vault, Data Vault, and File Vault).

What do we collect?

Our primary responsibility at Enigma Vault is to secure your sensitive data. Our services were built from the ground up with privacy and security in mind. To learn more about our security, please review our security policy.

Account information

On product registration, we collect your AWS Marketplace customer identifier along with an email address to associate your entitlements to our products. As a subscriber to our products, you’ll occasionally receive an opt-out newsletter from us outlining new features or tips on how to use our products. We do not share your account information with anyone.

Your data

We built a collection of API endpoints to make it easy for you to securely process and store various types of data. The data provided to us is never shared. You as the data owner have the ability to grant another Enigma Vault customer access to specific data through the use of ephemeral keys. If you’re sharing data with another Enigma Vault customer, please ensure your privacy policy reflects this practice.

Usage information

For monitoring and security related purposes, the client IP address gets logged. In addition, basic HTTP metadata gets logged for billing related purposes. Your usage information is summarized and then shared with the AWS Marketplace only for billing purposes. Your usage information is not shared with anyone else.

Marketing information

We may use information such as your name, email address, company, job title, and interactions with our website to communicate with you about Enigma Vault, our products, services, events, and other relevant business updates.

We use third-party tools to support our marketing and analytics activities, including:

  • HubSpot for marketing automation, forms, contact management, email communications, and campaign tracking.
  • Google Analytics to understand website traffic, visitor behavior, and campaign performance.
  • Google Tag Manager to manage analytics and marketing tags used on our website.
  • RB2B for business visitor identification and sales and marketing intelligence, where permitted by applicable law.

We do not sell personal information collected through our website or marketing activities. We may share information with these service providers only as necessary for them to provide services on our behalf and subject to applicable confidentiality and data protection obligations. We do not disclose this information to unrelated third parties for their own independent marketing purposes.

Where required by law, we obtain consent before using cookies or similar technologies for marketing purposes. You may opt out of marketing communications at any time by using the unsubscribe link in our emails or by managing your cookie preferences on our website.

Companywide commitment

Nothing is more important to us than ensuring the privacy and security of your data. Each employee takes a pledge of excellence to ensure quality, reliability, privacy, and security.