Privacy Policy

Last updated: June 2026

1. Introduction

Money Vault Games FZCO ("we," "our," or "us"), based in Dubai, UAE, operates the AlphaTill desktop application and this website. This Privacy Policy explains how we collect, use, and protect your information when you use our products and services.

2. Data We Collect

Desktop Application (AlphaTill)

  • All business data is stored locally on your computer — we do not have access to it.
  • License activation sends: license key, machine ID, and machine name.
  • Periodic check-ins send: license key and machine ID.
  • Security telemetry: when your device activates or checks in, our server also records the originating IP address and browser/app user-agent, and a timestamped license-event log. We use this strictly to detect licence abuse (e.g. key sharing, country-hopping, automated guessing) — it is never used to access your business data.
  • If you choose the free Solo edition when a trial ends, the app asks for an email address and sends it with your machine ID so we can issue the Solo licence to you. We use that address only to issue the key and to help you recover it — choosing Solo does not subscribe you to anything.
  • No business data, customer data, financial data, or inventory data is ever transmitted to our servers.

Website & Customer Portal

  • Account information: name, email, business name, hashed password.
  • Payment information: processed securely by Stripe — we do not store credit card numbers.
  • Support tickets: subject, description, and priority.
  • Server logs: standard request metadata (e.g. IP, user-agent, timestamps) kept briefly for security and reliability. We do not run third-party advertising or cross-site tracking.

3. How We Use Your Data

  • To validate and manage your software license.
  • To process payments and manage subscriptions via Stripe.
  • To provide customer support.
  • To send important product updates and security notifications.
  • We do not sell, rent, or share your personal data with third parties for marketing.

4. Data Security

We use industry-standard security measures including HTTPS encryption, bcrypt password hashing, and AES-256 encryption for local license data. Licence tokens are signed server-side with Ed25519 and verified locally against the public key embedded in the desktop app. Older desktop builds also receive a legacy HMAC-SHA256 signature during the transition; it is not the root of trust. Payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified provider.

5. Integrations You Switch On

If you enable Google Drive, OneDrive, Dropbox or WhatsApp, or a cloud AI provider, selected data is transmitted directly to that provider under its terms. Money Vault Games FZCO does not receive that data because the integration is enabled.

  • Your own cloud storage (Google Drive, OneDrive, Dropbox) — backup files are written to a folder you choose. Your provider holds them under your account, not ours.
  • WhatsApp — the messages and attachments you send from AlphaTill go to WhatsApp, along with the customer number you send them to.
  • A cloud AI provider (OpenAI, Anthropic, Google Gemini, OpenRouter) — the prompt you send, including whatever business data it contains, is processed under that provider's terms. The local AI path sends nothing anywhere.

Each of these is off until you turn it on, and each can be turned off again in the app. Because the connection is between you and that provider, their privacy policy governs what they do with the data — we are not a party to it.

6. Cookies

We use only essential first-party cookies required to keep you signed in to the customer portal (managed by our authentication layer) and to remember your cookie choice. We do not use advertising or cross-site tracking cookies. If we ever introduce optional analytics, those non-essential cookies will be loaded only after you consent.

7. Lawful Basis

Where data-protection law requires a lawful basis, we rely on:

  • Contract — to provide your licence, subscription, downloads, and support.
  • Legitimate interest — to secure our service and prevent licence abuse (the IP / user-agent telemetry above), balanced against your privacy.
  • Legal obligation — to retain anonymized invoice/tax records.

8. Your Rights

Depending on where you live — including under the UAE Personal Data Protection Law (PDPL), the EU/UK GDPR, and the California CCPA/CPRA — you may have the right to:

  • Access & portability: download a machine-readable copy of your account data from Portal → Account → Data & Privacy.
  • Erasure: permanently close your account and anonymize your personal data, self-serve, from the same page.
  • Rectification: correct your profile details at any time.
  • Objection / opt-out: opt out of non-essential communications; California residents may opt out of any “sale”/“share” of personal information (we do neither).

Self-serve deletion cancels active subscriptions and removes/anonymizes your personal data immediately. You can also email us to exercise any right; we respond within the timeframe required by applicable law.

9. Data Retention

We retain your account data for as long as your account is active. When you delete your account, your personal data is anonymized immediately; anonymized invoice and subscription records are kept only as long as required by tax/accounting law. Security telemetry (IP / user-agent / licence events) is retained for a limited period for abuse detection and then purged or anonymized.

10. Data Controller & Contact

The data controller is Money Vault Games FZCO, Dubai, UAE. For privacy requests or to exercise any right above, contact: privacy@moneyvaultgames.com. EU/UK or California residents may also contact us at this address regarding GDPR/CCPA matters.