← Vaultwell
DocumentationPrivacyTermsSupport

Vaultwell privacy policy

Last updated 2026-10-05. Vaultwell (the Wix app) is made by Great Work LLC, 651 N Broad St Suite 206, Middletown, DE 19709, USA. Contact: hello@greatwork.company.

Who is who

You are the owner of the Wix site where Vaultwell is installed. Vaultwell keeps backups (snapshots) of your site's content so you can see its history and restore it. Most of that content is yours: products, CMS items, blog posts, services, pricing plans and coupons. If you switch on site contacts, the backups also hold your customers' contact details; your customers are then the people those records are about, and Vaultwell processes their data on your behalf, only to back it up and restore it for you.

What we store

  • Your site's app instance: the Wix app instance id, site id, published site address and name, your plan status (from Wix) and which Stores catalog your site uses.
  • Your settings: which sources to back up, CMS collections left out, the schedule, and, if you switched contacts on, when you confirmed that.
  • Snapshots: a copy of each record Vaultwell backs up, as Wix returns it through its API, minus values Wix calculates (revision numbers, price ranges, view counts). Products with their variants, prices, stock and image links; every field of the items in your own CMS collections and each collection's field list; blog posts with their text and settings; Bookings services; Pricing Plans; coupons; and, only when you switch it on, site contacts (name, emails, phones, addresses, company, labels and custom fields). Each version of a record is compressed and encrypted (AES-256-GCM) with a key that never leaves our server, and stored once however many snapshots contain it.
  • Captured changes: when Wix tells us a record was created, changed or deleted, we read it from Wix and keep that version too, so history is finer than the schedule.
  • Record names and slugs, in clear text, for the history and restore lists (for example a product or post title). For contacts we store the word "Contact" instead of the person's name.
  • Image copies (Pro only): copies of the image files your products, CMS items and posts use, from Wix's media servers, encrypted on our disk.
  • Restore reports: what each restore changed, brought back or couldn't, kept with the same retention as snapshots.
  • Sessions: a random token for each dashboard session, deleted after 12 hours.

What we never store or do

Orders, payments, invoices, members, bookings that customers made, form submissions and your site's design are not read or kept. We don't look at your backups except to answer a support request you send us, we build no lists, never contact your customers, and never use any of this for anything but your backups and restores. We set no cookies and add nothing to your live site.

Where data goes

Our server in the United States (DigitalOcean, New York). Wix, through its API, to read your records and to write them back when you restore. During a Pro restore of an image whose original was deleted, Wix's Media Manager fetches our copy once through a private link that expires within 30 minutes. We use no analytics or advertising networks and no other processors.

Retention and deletion

  • Snapshots and captured changes are kept 90 days on Standard and 1 year on Pro. The newest snapshot is always kept, and the snapshot taken before a restore is kept at least 7 days. When your storage is full, the oldest snapshots go first.
  • Site contacts are never kept more than 30 days, whatever your plan. Switching contacts off deletes every saved contact at once.
  • When your plan ends, you can open and export your snapshots for 30 days; then every saved copy is deleted.
  • When you uninstall Vaultwell, sessions end at once and everything else is deleted 30 days later (so a reinstall by mistake loses nothing).
  • Settings > Your data deletes every snapshot, image copy and captured change for your site immediately (type DELETE to confirm), and Download what Vaultwell keeps gives you the list of everything we hold about your site. Exports of a snapshot (CSV or JSON) are copies outside our service.
  • If a customer asks us about their data, we answer within 30 days and check the request with you first. You can delete a contact's saved copies sooner by asking us at hello@greatwork.company, or all contacts by switching them off.

Security

HTTPS everywhere. Requests from Wix are verified (signed app instances, signed webhooks). Backups are encrypted per site: a copy moved to another site's record fails to open. Image copies are only taken from Wix's own media servers, at most 15 MB each. The app runs as its own unprivileged user, and its web server doesn't log request addresses or links for Vaultwell pages.

Changes

If this policy changes in a way that matters, we'll update the date above and tell site owners through the app.