Data Privacy, Credential Encryption & Security Architecture
Effective Version: 2.1.0
This Privacy Policy describes how this database backup and management application ("Software") handles data, metadata, telemetry, and connection credentials during its lifecycle.
The Software operates exclusively as an on-premise, self-hosted, or customer-managed infrastructure tool. The Application Designer and Licensor do NOT have access to, custody of, or control over your database records, table rows, backup files, or storage endpoints. The Licensee remains the sole Data Controller and Data Fiduciary under all applicable laws (including GDPR, HIPAA, and DPDP), and assumes complete, exclusive legal liability for all data backed up, transferred, or restored using the Platform. The Licensor is never a data custodian, broker, or processor of your business data.
Database connection parameters (hostnames, ports, usernames, and passwords) entered into the Platform are stored locally in the database using high-grade symmetric encryption (AES-256-GCM). Credentials are decrypted strictly in-memory solely for the execution of authorized backup, restore, or connectivity verification operations.
When configured, database dumps and binary snapshots are compressed and encrypted prior to transmission to local or remote storage targets. The Application Designer has no visibility into, or access to, the contents of the database schemas, tables, rows, or records contained within backup archives.
The Platform maintains internal operational logs, audit records (user logins, configuration edits, backup executions), and system alerts to assist administrators in monitoring operations and investigating discrepancies. These logs are stored within the licensee's deployment environment and are not transmitted to the Application Designer. Backup contents, database records, schema details, file listings, backup outcomes and storage destinations never leave the licensee's infrastructure.
Separately from Section 4, the Software is licensed software and verifies its own entitlement against the Application Designer's licence service. This requires data to be transmitted off the licensee's infrastructure. On activation, and on each periodic revalidation, the following is sent to and retained by the Application Designer:
This data is used to enforce node entitlements, to prevent software piracy, to establish which releases an installation should be offered, and to allow the licensee's own administrators to see their estate in the customer portal. It is retained for the life of the licence and, where an activation is deactivated, retained thereafter as a record of that activation. It is not sold, brokered or used for advertising.
Where the licensee holds an account in the customer portal, the Application Designer additionally holds the account holder's name, email address, company name, country and region, authentication credentials in hashed form, session and audit records, and the invoices and payment records raised against the account. This data is held to operate the account and to meet statutory record-keeping obligations.
The Licensee remains solely responsible for securing host server access, operating system patches, network firewalls, and TLS/HTTPS certificates protecting client communication. The Application Designer unconditionally disclaims liability for data exposure, ransomware, security breaches, unauthorized operator access, or infrastructure compromise occurring on customer environments.
For questions regarding this policy, to request a copy of the licensing telemetry held about your installations, or regarding the software licensing agreement, contact the designated administrative authority or software licensor.
© 2026 VaultDBM Systems. All rights reserved.