Privacy Policy

Last updated: June 2026

1. What This Policy Covers

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use VaultTutor, regardless of where you are located. We aim to comply with applicable data protection laws, including the EU/UK General Data Protection Regulation (GDPR), Japan's Act on the Protection of Personal Information (APPI), the California Consumer Privacy Act (CCPA), and Australia's Privacy Act 1988, to the extent they apply to you.

2. Information We Collect

Category	Examples
Account information	Name, email address, phone number, country code, password (hashed)
Usage data	Course progress, pages viewed, preferences (e.g. notification settings)
Communications	Messages sent to us via WhatsApp, email, or contact forms
Technical data	IP address, browser type, device information (collected automatically)

3. How We Use Your Information

• To create and manage your account and provide access to courses and the knowledge base;
• To send weekly market summaries and account-related notifications, where you have opted in;
• To provide 1-on-1 mentoring and respond to your inquiries;
• To improve and secure the Service;
• To comply with legal obligations.

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we process your data on the following legal bases: performance of a contract (providing the Service you signed up for), your consent (e.g. for marketing emails), and our legitimate interests (e.g. securing and improving the Service).

5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your data ("right to be forgotten");
• Receive a copy of your data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent at any time where processing is based on consent.

You can exercise the access, download, and deletion rights directly from your Account Settings page. For any other request, contact us using the details below.

6. Data Retention

We retain your personal data for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account, we delete your personal data, except where retention is required by law.

7. Cookies

We use essential cookies required for the Service to function (such as keeping you logged in) and, where applicable, analytics cookies to understand how the Service is used. You can control non-essential cookies through the consent banner shown on your first visit, or through your browser settings.

8. International Data Transfers

Your data may be processed in Israel and other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as standard contractual clauses or applicable adequacy decisions) for international transfers of personal data.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including password hashing and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email where appropriate.

12. Contact Us

For privacy-related questions or to exercise your data protection rights, contact: Yaniv Malka Entrepreneurship & Real Estate, Ben Yosef 17, Netanya, Israel, or via the contact details listed on our homepage.