Privacy Policy
Controller
Lorechive (formerly Loretium) is operated by Joel Gamble, an individual in the United States. Contact: support@mylorechive.com.
EU representative (GDPR Art. 27): [to be appointed, name and postal address]. UK representative (UK GDPR Art. 27): [to be appointed, name and postal address].
What we keep
Your account details (username, email address, a hash of your password), everything you put in your Vaults, and basic first-party usage counts. We do not use third-party analytics or advertising, and we do not sell data.
Why, and the legal basis
To run the service you asked for (contract), to keep it secure (legitimate interests), and to send transactional email such as sign-in and recovery messages. We send no newsletters.
Who processes it
- OVHcloud (OVH SAS, France): hosts the server in its UK data centre in Erith, London. [region to be confirmed in the OVH panel]
- Resend: sends our transactional email.
- Cloudflare R2: stores uploaded media.
- Backblaze B2: stores encrypted backups.
- hCaptcha (Intuition Machines): checks sign-ups are made by people.
- OpenAI, Anthropic and OpenRouter: receive the text you send to the AI Assistant when it runs on a server connection, or on a key a Vault Owner supplies.
Retention
Deleting your account removes your data after a 14-day grace period; copies in backups expire within about six months. You can export your data at any time.
Your rights
You can ask us to access, correct, export or delete your data, to restrict or object to its use, and to complain to your data protection authority. Write to the contact address above.
Transfers
Data is stored in the United Kingdom. Some processors above are in the United States; we rely on their standard contractual clauses or equivalent safeguards. [to be checked per processor]
Cookies
See the Cookie notice.