NavLuxeVault demo accounts

Demo privacy notice

24 October 2026 · version navluxevault-demo-privacy-2026-10-24-v2. Applies to the NavLuxeVault demo account service.

What the service stores

The demo account service stores account ID, password hash, account creation time, demo account type, accepted terms/privacy versions and acceptance time; hashed session verifiers and expiry; encrypted demo snapshots with random IDs, type, revision, upload-consent version/time and save time. Account IDs are not verified identities. No account email, payment details or marketing subscription is collected in this release.

What stays local

Scenario encryption/decryption happens in your browser. The storage passphrase, decryption key, originals and identity mappings are not sent to this API. The separate encrypted local vault is not opened by the account page. The guest demo itself uses plaintext browser storage: use mock data only. A server cannot verify that ciphertext contains only synthetic data.

Hosting and connection information

The dedicated local PostgreSQL database is on the operator's Mac, separate from NavGanitMate. The public API runs on that same operator-managed Mac; this is a single-host service, not a managed cloud or independently verified data-residency service. No original financial records are accepted. Website requests pass through Cloudflare; its infrastructure may process connection metadata outside Australia. The existing public website uses Cloudflare, which processes ordinary connection information such as IP address and requested pages; see website privacy information. API request counters use client addresses transiently in process memory. Public-site infrastructure may have separate operational logs. No claim of anonymous browsing or certified security is made.

Purpose, access and controls

Account metadata supports authentication, access control, abuse prevention, versioned acceptance and requested scenario storage. Scenarios are encrypted before upload; operators administer the database and can see account/storage metadata but are not given your decryption passphrase. Delivered website code, browser and device remain trusted. Unauthorised or compromised clients can expose information; do not enter real personal or confidential data in this demo.

Retention and deletion

There is no fixed account retention or automated archival-backup schedule in this evaluation release. Keep your own encrypted exports. Live snapshots persist until explicitly deleted, the account is deleted, or the service removes them under its demo terms. Account deletion removes live account, session and saved-object rows. Operator backup retention, if introduced, must be disclosed before public activation. Your own downloaded files and browser demo data are separate and are not removed by server deletion.

Your choices and contact

Guest use is optional and requires no account. Upload requires separate review/confirmation; account creation uploads no existing scenario data. You may export saved ciphertext, sign out, delete saved copies or delete your account. Marketing choices remain separate. For privacy questions contact support@navgreencompute.com.au; do not attach private financial material. Account/password/key recovery is not implemented.