Privacy Policy

Last updated: August 13, 2025

X-ray Vault is a professional document management and upload solution for FDA 2579 documents and related files. We respect your privacy and are committed to protecting it through our compliance with this policy.

Information We Collect

  • Account and Identity Information: When you authenticate (e.g., via Google), we receive basic account identifiers from the identity provider to create and maintain your account and session.
  • Document Data: Files you upload (e.g., FDA 2579 PDFs, images) and associated metadata (filename, size, upload timestamp, and customer phone number when provided for search purposes).
  • Usage and Device Data: Basic logs for security and diagnostics (IP address, timestamps, request paths, and error details). We do not profile users or perform behavioral advertising.

How We Use Information

  • Provide, operate, and improve the X-ray Vault service.
  • Authenticate users and enforce access controls.
  • Store and retrieve documents on your behalf.
  • Protect the security and integrity of our systems (fraud detection, abuse prevention, auditing).
  • Comply with legal obligations.

Data Security

X-ray Vault uses encryption in transit (HTTPS) and encrypts documents at rest. Access is role-based and actions may be logged for auditing. While we implement commercially reasonable safeguards, no method of transmission or storage is 100% secure.

Data Retention

We retain uploaded documents and related metadata for as long as your account or organizational contract is active or as needed to provide the service. Log data may be retained for a limited period for security and compliance. You may request deletion of documents you control, subject to legal or contractual requirements.

Sharing and Disclosure

  • Service Providers: We may share limited data with vendors who process data on our behalf under contract.
  • Legal Compliance: We may disclose information when required by law or to protect rights, safety, and security.
  • No Selling of Personal Data: We do not sell your personal information.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal information, and to object to or restrict certain processing. To exercise rights related to your account or documents, please contact us via the Contact page.

Cookies and Similar Technologies

We use strictly necessary cookies for authentication and security (for example, ASP.NET Identity and anti-forgery cookies). See our Cookie Policy for details.

International Transfers

If you access X-ray Vault from outside the hosting region, your information may be transferred and processed in that region. We take steps to ensure appropriate protections consistent with applicable laws.

Children's Privacy

X-ray Vault is not intended for children under 16 and we do not knowingly collect personal information from children.

Contact

Questions about this policy? Visit our Contact page. This policy may be updated from time to time.