Privacy Policy

Effective date: October 24, 2026

ClipVault lets you save text snippets in a vault that you access with a five-digit code. You may also connect your Google Account to attach images and PDFs stored in your own Google Drive. This policy explains what ClipVault processes when you use the service.

Information ClipVault stores

• Vault and snippet data: your five-digit vault code, snippets and their titles, and timestamps needed to provide the service.
• Drive file information: when you connect Drive, ClipVault stores your Google account email, the identifier of the app-created Drive folder and files, and each attached file's name, type, size, and timestamp. The file contents are stored in your Google Drive, not ClipVault's database.
• Google authorization: ClipVault stores an encrypted Google refresh token so it can access the files created for ClipVault after you leave the site. The token is encrypted at rest. Short-lived Google access tokens are held in server memory when needed.
• Technical information: ClipVault processes your IP address for abuse prevention and rate limiting. Rate-limit counters are temporary. Your browser may store your vault code locally when you select “Remember me on this device.”

How Google data is used

ClipVault requests the Google Drive drive.file scope and permission to see your email address. Drive access is used only to create a ClipVault folder, upload, list, display, download, and move to trash the files you attach through ClipVault, and to show which Google account is connected. ClipVault does not request general access to your entire Drive, sell Google user data, or use it for advertising.

Google handles sign-in and provides Google Drive. Use of Google services is also subject to Google's own terms and privacy policy. ClipVault's hosting and database providers process data on the service's behalf.

Sharing and security

ClipVault does not sell your personal information. Snippets and attached file references are provided to people who enter the corresponding vault code. Anyone who knows the five-digit code can access that vault, so do not store sensitive information there. Drive file contents remain in your Google Drive and are accessed by ClipVault through Google's API.

ClipVault uses access controls, rate limits, HTTPS in production, and encryption for stored Google refresh tokens. No method of storage or transmission can be guaranteed completely secure.

Retention and deletion

You can delete individual snippets and attachments from a vault. Deleting an attachment in ClipVault moves that file to the trash in your Google Drive. Disconnecting Google Drive asks Google to revoke the token, removes ClipVault's stored token and file references, and leaves the files in your Drive.

Vaults that have not been used for one year are purged from ClipVault. This removes the vault, its snippets, stored Drive token, and file references from the app database. It does not delete files from your Google Drive. Temporary rate-limit records are also periodically removed.

You can clear a remembered vault code by signing out in the app or clearing this site's local storage in your browser.

Changes and contact

This policy may be updated as ClipVault changes. The current version will be published on this page with its effective date.

Questions about privacy? Contact contact.mohite@gmail.com.