Nexor Vault Online Privacy Policy

Version: 2026-10-30

Last updated: October 30, 2026

Your privacy is important to us. This Online Privacy Policy explains how Nexor Vault, a product of Nexor Technologies, LLC (“Nexor Vault,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you visit or use the Nexor Vault platform, including our website, mobile-accessible services, and all related applications and services (collectively, our “Service”). This policy is intended for a U.S. audience. By accessing or using our Service, you acknowledge that you have read and understood this Online Privacy Policy.

General Principles

As you review this Online Privacy Policy, here are a few general principles to keep in mind:

  • Our Service is intended for a U.S. audience. If you access our Service from outside the United States, your information may be transferred to and processed in the United States.
  • Our Service is not intended for children under thirteen (13). We do not knowingly collect personal information from children under thirteen (13), in compliance with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq. A minor may be named solely as a beneficiary in a trust document created by an adult account holder, as described in the Children’s Privacy section below.
  • If you are a U.S. consumer and have a financial product or service with us, we will use and share any information that we collect from or about you in accordance with our Regulation P Consumer Privacy Notice, which offers you certain choices with respect to the use and sharing of your personal information.
  • If you are a resident of California, Virginia, Colorado, or Connecticut, you may have additional rights under applicable state consumer privacy laws, including the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and the Connecticut Data Privacy Act (CTDPA). Depending on your state of residence, you may have additional rights regarding your personal information under applicable state law.

Information We Collect

The types of personal information we collect and share depend on the products and services you use with us. This information may include:

  • Identity information, including your name, date of birth, email address, and phone number
  • A tax identifier for a trust you create. This field is optional and is intended for the trust’s Employer Identification Number (EIN); if you enter a Social Security number there instead, that is what we store. It is encrypted before it is written to our database.
  • Financial account data, including account balances, transaction history, and holdings (collected via Plaid)
  • Account activity and usage data
  • Trust, estate, insurance, and property documents uploaded to the Document Vault
  • Beneficiary and co-trustee information
  • Device and browser information, including operating system, screen resolution, and device identifiers
  • IP addresses and limited location information
  • Information about how you use our Service, including pages viewed, features accessed, search terms, and navigation patterns

How We Collect Information

We collect personal information from the following sources:

  • Directly from you: When you create an account, provide account information, upload documents, link financial accounts, use the trust-builder tools, enter a property address, forward a financial statement to your Nexor Vault email address, or contact us.
  • From financial institutions through Plaid: When you connect your financial accounts, Plaid collects and transmits your financial data to us on a read-only basis. Your use of Plaid is also subject to Plaid’s end-user privacy policy at https://plaid.com/legal.
  • From third-party service providers: We may receive information from our technology and service partners who assist in operating our platform, including authentication, database hosting, property-data, and AI processing providers.
  • Through automated collection: We and our service providers may use cookies, web beacons, and other tracking technologies to collect information about your use of our Service automatically. See the Cookies, Web Beacons, and Tracking Technologies section below for more details.

Use of Information

We use the information we collect for the following purposes:

  • Processing transactions and maintaining your account(s)
  • Verifying your identity (such as when you access your account information)
  • Preventing fraud and enhancing the security of your account and our Service
  • Responding to your requests and communicating with you
  • Managing your preferences
  • Performing analytics concerning your use of our Service, including your responses to our emails and the features and pages you access
  • Providing you with tailored content and marketing messages
  • Operating, evaluating, and improving our business, including developing new products and services and improving existing ones
  • Facilitating trust-builder document generation, AI-powered document analysis, financial data insights, and platform assistance features
  • Recording and tracking filings that you or your attorney make with government agencies, including the IRS, state courts, and county recorders
  • Complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations, and our policies
  • For any other purposes that we may specifically disclose at the time you provide or we collect your information

We may also use data that we collect on an aggregate or anonymous basis for various business purposes, where permissible under applicable laws and regulations.

Disclosure of Information

We may share the information we collect from and about you with third parties as described below. In particular, we may share your information with:

  • Third-party service providers who assist in operating and improving our Service, including:
  • Plaid — financial account aggregation
  • Clerk — authentication and session management
  • Microsoft Azure — database hosting (Azure Database for PostgreSQL), encrypted document storage (Azure Blob Storage), and secrets management (Azure Key Vault)
  • Resend — transactional email, and receipt of financial statements you forward to your Nexor Vault email address
  • Anthropic — AI processing for trust-builder drafting, document analysis, forwarded-statement extraction, and the in-app assistant. The trust tax identifier is never sent to Anthropic; see AI-Powered Features and Data Processing below.
  • RentCast — property details, tax history, and a value estimate, for a property address you enter
  • Market-data services — Yahoo Finance receives the ticker symbols of holdings in your portfolio when we fetch a live price; open.er-api.com receives a request for reference exchange rates that contains no information about you
  • Our affiliates. Nexor Technologies, LLC has no affiliated companies today, and we do not share your information with any. If that changes, we will update this policy and our Regulation P Consumer Privacy Notice before sharing with an affiliate, when permissible under relevant laws and regulations.
  • Professionals and advisors you designate through our access-sharing feature, including attorneys, CPAs, financial advisors, and family members.
  • Third parties in connection with a corporate transaction, such as a sale, consolidation, or merger of Nexor Vault’s business.
  • Government agencies and other third parties to comply with legal requirements such as the demands of applicable subpoenas and court orders; to verify or enforce our Terms of Service or other applicable policies; to address fraud, security, or technical issues; to respond to an emergency; or otherwise to protect the rights, property, or security of our users or third parties

Nexor Vault does not sell your personal information to third parties.

Data Processing Agreements with Third-Party Service Providers

Nexor Vault works with a limited number of carefully selected third-party service providers to help operate, secure, and improve our Service. As described in the Disclosure of Information section, we contractually require these providers to maintain appropriate security measures and to use your information only to provide services to Nexor Vault. Each of these providers has entered into, or makes available, a data processing agreement ("DPA") that sets out how it handles personal information on our behalf. For transparency, you can review each provider's DPA at the links below:

These agreements are maintained and updated by the respective providers, and their terms may change from time to time. Nexor Vault is not responsible for the content or privacy practices of third-party websites. If you have questions about how any of our service providers process your personal information, please contact us using the information in the Contact Information section below.

AI-Powered Features and Data Processing

Nexor Vault incorporates artificial intelligence (“AI”) features to enhance your experience. These AI-powered features include:

  • Trust-builder document generation — AI-assisted creation and drafting of trust instruments and related documents
  • Document analysis, classification, summarization, and data extraction — automated processing of uploaded trust, estate, insurance, and property documents, and of financial statements you forward to your Nexor Vault email address
  • Financial data insights — analysis and visualization of aggregated financial data from linked Plaid accounts, including identifying potential trust-funding opportunities, for informational purposes only
  • Platform assistance and contextual help — AI-driven support to help you navigate the Service and answer questions

Third-Party AI Provider. We use Anthropic as our third-party AI processing provider. When your data is processed by AI features, it may be transmitted to Anthropic’s systems for processing. Documents you upload for automated reading, and statements you forward, are transmitted in full and may contain whatever information those documents include. When a trust document is drafted, we send a structured summary of the trust: the names of the people in it, their roles and relationships, the beneficiary shares, and the asset schedule. The trust tax identifier is never sent to Anthropic; our own systems add it to the drafted document after the draft is returned. We also withhold email addresses and phone numbers from drafting requests. We contractually require our AI providers to maintain appropriate security measures and to use your data only for the purposes of providing services to Nexor Vault. These features run only when you use them; we do not send your documents for automated reading unless you ask for it.

Important Limitations. AI-generated content, including trust-builder documents, document summaries, and financial insights, is provided for informational purposes only and does not constitute legal, financial, tax, or other professional advice. You should always consult with a qualified professional before making decisions based on AI-generated content. We do not permit AI providers to use your data to train or improve their general-purpose models.

No Automated Decision-Making. Nexor Vault does not use automated decision-making processes that produce legal or similarly significant effects on you without human involvement.

Our AI Processing Disclosure describes these features in more detail.

Access-Sharing Feature and Your Data

Nexor Vault’s access-sharing feature allows you to grant scoped, section-level access to your account information to designated third parties, including attorneys, CPAs, financial advisors, and family members. Key features of access-sharing include:

  • User-controlled sharing: You control which sections of your account information are shared and with whom. You can customize access permissions for each invitee.
  • Audit logging: All access-sharing activity is logged in an audit trail, providing you with a record of who accessed your information and when.
  • Revocation: You may revoke access-sharing permissions at any time. Once revoked, the designated individual will no longer be able to view your shared information. Revocation does not affect information that the designated individual viewed or downloaded before access was revoked, and Nexor Vault is not responsible for any use of such information.

Cookies, Web Beacons, and Tracking Technologies

We, or our service providers, and other companies we work with may deploy and use cookies, web beacons, local shared objects, and other tracking technologies for fraud prevention, security monitoring, and improving our Service. Some of these tracking tools may detect characteristics or settings of the specific device you use to access our Service. Today, the only cookies our Service sets are those required for authentication and security; we do not operate advertising or third-party analytics tracking on the Service.

  • “Cookies” are small amounts of data a website can send to a visitor’s web browser. They are often stored on the device you are using to help track your areas of interest. Cookies may also enable us or our service providers to relate your use of our Service over time to customize your experience. Most web browsers allow you to adjust your browser settings to decline or delete cookies, but doing so may degrade your experience with our Service.
  • Clear GIFs, pixel tags, or web beacons — which are typically one-pixel, transparent images located on a webpage or in an email or other message — or similar technologies may be used on our sites and in some of our digital communications. These are principally used to help recognize users, assess traffic patterns, and measure site or campaign engagement.
  • Local Shared Objects, sometimes referred to as “flash cookies,” may be stored on your hard drive using a media player or other software installed on your device. Local Shared Objects are similar to cookies in terms of their operation but may not be managed in your browser in the same way.

Third-Party Websites

Nexor Vault may provide links to websites that are owned or operated by other companies (“third-party websites”). When you use a link to visit a third-party website, you will be subject to that website’s privacy and security practices, which may differ from ours. You should familiarize yourself with the privacy policy, terms of use, and security practices of the linked third-party website before providing any information on that website. Nexor Vault is not responsible for the privacy practices or content of third-party websites.

Security

We use reasonable physical, electronic, and procedural safeguards that comply with federal law to protect and limit access to personal information. Nexor Vault maintains a comprehensive written information security program in compliance with the FTC Safeguards Rule, 16 CFR § 314, and the Gramm-Leach-Bliley Act (GLBA). Our security measures include:

  • Computer safeguards and secured files and buildings
  • Encryption in transit (TLS) for all application traffic, and AES-256 encryption of data at rest, including application-level encryption of financial-institution access tokens and trust tax identifiers before they are written to our database
  • Multi-factor authentication, available for every account and required for firm administrators
  • Role-based access controls to limit data access to authorized personnel
  • Audit trails of access to the vault content you share, which you can review in your activity log
  • Regular risk assessments to identify and address potential vulnerabilities
  • An incident response plan to promptly address any security events
  • A designated qualified individual overseeing our information security program
  • Annual reporting to our governing body on the status and effectiveness of security measures

Please note that information you send to us through channels outside the Service, such as standard email or text message, may not be secure when it is transmitted to us. We recommend that you do not use unsecure channels to communicate sensitive or confidential information (such as a tax identifier) to us.

Your Privacy Rights

Depending on your state of residence, you may have certain rights regarding your personal information under applicable state consumer privacy laws, including the CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), and CTDPA (Connecticut). These rights may include:

  • Right to know: You may request information about the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to correct: You may request that we correct inaccurate personal information we maintain about you.
  • Right to opt out: You may opt out of the sharing of certain parts of your personal information. Please note that Nexor Vault does not sell your personal information.

Non-discrimination. Nexor Vault will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, or if you have any questions about your rights, please contact us using the information provided in the Contact Information section below or check to see what rights are applicable to you under the consumer privacy laws of your state.

Access and Deletion Requests

Regardless of your state of residence, all Nexor Vault users may request access to, or deletion of, the personal information we maintain about them. You may delete your account and its data from your account settings, and you may submit an access request by contacting us using the information in the Contact Information section below. To protect your information, we will verify your identity before fulfilling any request, which may include confirming your identity through our multi-factor authentication process. We will respond to verified requests within the time required by applicable law, and the following rules apply to specific categories of data:

Unlinked account data: If you disconnect a financial account linked through Plaid, we stop collecting new data from that institution and delete the account, balance, and transaction records we stored for it. Aggregate net-worth history that was computed while the account was linked is not removed by unlinking; it remains subject to access and deletion requests, subject to our legal and regulatory retention obligations.

AI-processed data: Your access and deletion requests extend to data processed by our AI-powered features, including inputs you provide, documents analyzed, and AI-generated outputs such as trust-builder drafts, document summaries, and financial insights stored in your account. When we delete such data, we will also instruct our third-party AI processing provider, Anthropic, to delete any of your data it retains on our behalf, consistent with the terms of its data processing agreement.

Co-owned trust records and joint deletion: Trust records that are co-owned with other stakeholders, such as co-trustees or beneficiaries, cannot be deleted at the request of a single user. To delete a co-owned record, contact us to initiate a joint-deletion request. We will notify each co-owner of the request, and the record will be deleted only after all co-owners have approved the request. If any co-owner declines or does not respond, the record will be retained, and we will remove or de-identify your personal information within the record to the extent possible without affecting the rights of the other co-owners. You may still access co-owned records to the extent of your permissions.

Limitations: We may retain certain information where required or permitted by law, including to comply with legal, tax, or regulatory obligations, to resolve disputes, to prevent fraud, or to enforce our agreements. If we cannot fully honor a request, we will explain the reason in our response.

Data Retention and Account Termination

Nexor Vault retains your personal information for as long as your account is active or as needed to provide you with our Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Upon account termination:

  • Data export: You may request a copy of your content in a commonly used electronic format at any time before your account is closed and for 30 days after account closure or termination. We will retain your content during this 30-day period so that we can fulfill your request.
  • After the export period: Once the 30-day period ends, we may delete or retain your content in accordance with our data retention policies and applicable legal requirements, and you may no longer be able to access or obtain a copy of your content through the Service.
  • Trust records that are co-owned with other stakeholders (such as co-trustees or beneficiaries) will not be automatically deleted upon your account termination. A joint-deletion process is available for co-owned records by contacting us.
  • After account closure, access to your content through the Service may no longer be possible.

Children’s Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13, in compliance with the Children’s Online Privacy Protection Act (COPPA), 15 U.S.C. § 6501 et seq.

Limited exception: A minor may be named solely as a beneficiary in a trust document created by an adult account holder. In such cases, the adult account holder is responsible for providing and managing any information related to the minor beneficiary. We do not directly collect information from the minor.

If you believe we have inadvertently collected personal information from a child under 13, please contact us immediately using the information in the Contact Information section below, and we will take steps to delete such information.

Updating Your Information

Keeping your account information up to date is very important. You may review or update certain account information by logging in and accessing your account settings. If you cannot change the incorrect information through your account settings, or you prefer to request changes offline, please contact us using the information provided in the Contact Information section below.

Changes to This Online Privacy Policy

For material changes to this policy, we will provide you with at least thirty (30) days’ advance notice before the changes take effect. Any changes to this Online Privacy Policy will become effective when posted unless indicated otherwise. Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.

Contact Information

If you have questions about this Online Privacy Policy or wish to exercise your privacy rights, please contact us:

Nexor Vault

c/o Nexor Technologies, LLC

5202 SW Blaire Mont Rd

Bentonville, AR 72713

Phone: (479) 770-9539

Email: akshay@nexortech.com

Website: https://www.nexortech.com/#contact

Last updated: October 2026