Last updated: September 20, 2026
Lazarus Vault ("we", "us", "our") operates a secure legacy delivery service. We take your privacy seriously and design every aspect of our service to minimize the data we collect and maximize the security of what we hold.
All files and messages are encrypted using AES-256-CBC encryption with a per-client key. Each client's key is encrypted by a master key stored in a configuration file separate from the database. Your vault is completely separate from every other client's vault.
Your data is retained for as long as your account is active. If you delete your account, all your files, messages, and personal data are permanently deleted within 30 days. If your trigger fires, your data is retained indefinitely to maintain recipient access links.
You have the right to access, download, modify, or delete your data at any time through your dashboard. You can also export all your data by downloading your files and copying your messages.
We use industry-standard encryption, secure session management, CSRF protection, and server-side access controls. However, no system is 100% secure. We recommend using a strong, unique password and keeping your email account secure.
We use a single session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or advertising cookies.
If you have questions about this privacy policy, please contact us at hello@lazarusvault.com.