Privacy Policy

Edukas Solutions LLC is a Delaware-registered software and consulting company with operations based in West Hollywood, California. We provide strategic AI and data consulting — data engineering, cloud architecture, applied machine learning, and custom software builds — and we operate a portfolio of software products:

• LifeVault Secure — an end-to-end encrypted personal vault
• LedgerLens — a receipt and expense tracking platform
• ReelDeck Studio — a short-video content management tool
• MomentoSync — a memory and moment synchronization platform

What we collect depends on whether you are a website visitor, a prospective consulting client, an active engagement client, or a user of one of our products.

Inquiry and contact information

When you email us or submit a contact request, we collect the contact details and the content of your message.

Consulting engagement data

Under a signed Statement of Work, we receive working files, source data, code, system access credentials where required, and other materials your project depends on. The categories of data and the handling rules are governed by your SOW and by any data processing addendum we sign with you.

Product account information

When you create an account in one of our products, we collect your email address and display name. You may add a profile photo if you choose.

Product content you upload

This may include vault items and notes (LifeVault Secure), receipt images and expense records (LedgerLens), video metadata and captions (ReelDeck Studio), or moment entries (MomentoSync). See Section 6 for how LifeVault content is handled.

Usage analytics

We use Google Analytics 4 to understand how our website and products are used. This includes page views, feature interactions, session duration, and general device and browser information. GA4 uses anonymized identifiers.

Payment information

Payments are processed by Stripe. We never see or store your full card number, CVV, or bank account details. Stripe handles all payment data on its PCI-DSS compliant infrastructure. We retain billing history — invoice number, amount, date, payment status — for our financial records.

We use the information we collect to:

• Deliver consulting services described in your signed Statement of Work
• Operate and maintain the software products you signed up for
• Send transactional email — account confirmations, billing receipts, password resets — through SendGrid
• Send marketing or product updates only if you have opted in
• Respond to your support requests and questions
• Analyze aggregate, anonymized usage data to improve our services
• Detect and prevent fraud or abuse
• Comply with legal, tax, and accounting obligations

We do not sell your personal data. We do not use your data to build advertising profiles or transfer it to data brokers.

We rely on the following providers to operate our services. Each provider has its own privacy policy.

• Stripe — payment processing
• SendGrid (Twilio) — transactional and marketing email
• Supabase — database hosting and authentication
• Vercel — frontend application hosting
• Railway — backend application hosting
• Microsoft 365 — business email and document storage
• Google Analytics 4 — product and website analytics

These providers maintain their own industry-standard security certifications, which they publish on their own sites. Edukas Solutions LLC does not itself currently hold SOC 2, ISO 27001, HIPAA, or PCI-DSS certifications. Where applicable, our providers' certifications support the technical controls described in Section 6.

Inquiry data. Contact form submissions and inbound email retained for up to 24 months, after which they are archived or deleted unless they are part of an active client relationship.

Consulting engagement data. Retained for the duration of the engagement and for the period specified in the signed SOW. Working files, source materials, and credentials provided by the client are returned or destroyed at engagement close per the SOW's data return clause.

Product account data. Retained for as long as your account is active. If you delete your account, we purge your personal data within 90 days, except where we are required to retain specific records for legal or financial compliance.

Billing and tax records. Retained for seven years to satisfy US tax and accounting obligations.

We protect your data using the controls described below.

LifeVault Secure — client-side end-to-end encryption

LifeVault Secure uses client-side end-to-end encryption (E2EE). Vault contents are encrypted in your browser using a key derived from your credentials before they are uploaded to our servers. We cannot read, access, or decrypt your vault contents — only you hold the keys. If you lose your encryption key or passphrase, we cannot recover your vault data.

Other products and consulting working data

LedgerLens, ReelDeck Studio, MomentoSync, and consulting working files use the at-rest encryption provided by our database and hosting infrastructure (Supabase, Vercel, Railway). Data is encrypted at rest and in transit (TLS). Our engagement team can access this data when delivering the service.

Access controls

We limit access to personal data to the engagement team members and product engineers who need it to deliver the service. Production credentials are rotated when team members leave the engagement.

Honest scope statement: Edukas Solutions LLC does not currently hold SOC 2, ISO 27001, or HIPAA certifications. We do not market a zero-knowledge architecture for any product other than LifeVault Secure.

Depending on where you live, you may have certain rights over your personal data, including:

• Access — request a copy of the data we hold about you
• Correction — ask us to correct inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a portable format
• Opt-out of marketing — unsubscribe from marketing email at any time using the link in any marketing message

California residents (CCPA/CPRA). You have the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising.

EU, EEA, and UK residents (GDPR/UK GDPR). You have the rights listed above, plus the right to object to or restrict processing, the right to withdraw consent, and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, email info@edukassolutions.com. We will respond within 30 days. We may need to verify your identity before fulfilling the request.

Our infrastructure is hosted in the United States. If you are located outside the US, your data will be transferred to and processed in the US. For clients in the EU, EEA, and UK, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards where applicable. Engagement-specific transfer terms can be addressed in your SOW or a separate Data Processing Addendum.

We use the following cookies and tracking technologies on our websites and products:

• Google Analytics 4 — analytics cookies to understand product and website usage. You can opt out via Google's opt-out browser add-on.
• Stripe — Stripe sets cookies on payment pages for fraud prevention and payment processing.
• Authentication cookies — session tokens set by Supabase Auth to keep you signed in to our products.

We do not use third-party advertising cookies or retargeting pixels.

Our services are not directed to children under the age of 13, or under the age of 16 for users in the European Economic Area. We do not knowingly collect personal data from children below these ages. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. For material changes — those that significantly affect how we use your data — we will notify active product users by email and active engagement clients through their SOW communication channel.

Continued use of our services after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, contact us: