Privacy policy
Last updated September 23, 2026
This policy explains what information M365 Vault collects, how we use it, and the choices you have. M365 Vault is a product of Vantir Group (“we,” “us”). Questions: info@m365vault.com.
Who this covers
- Customers: mortgage professionals who buy M365 Vault (“you”).
- Senders: borrowers and others who upload documents through a customer’s SecureSend link.
- Visitors to m365vault.com and its signature builder.
What we collect
From customers
- Your name, email address and the details you give us to set up your account, such as your company name and logo.
- Payment information is collected and processed by Stripe. We receive confirmation of payment, the plan, and your name and email, but never your full card number.
From senders
- The files they upload and the file names, sizes and upload times.
- Technical information our cloud providers record for security and reliability, such as IP address and browser type.
Senders don’t create accounts, and we don’t ask them for anything beyond the files they choose to send.
From visitors
This website uses no advertising or analytics cookies. Our hosting provider keeps standard server logs for security. The signature builder runs in your browser: the details you type are saved only in your own browser and aren’t sent to us.
How we use information
- To provide the service: deliver uploaded files to the right customer’s private folder, and set up and support customer accounts.
- To process payments and send receipts and service messages.
- To keep the service secure, prevent abuse and fix problems.
- To meet legal obligations.
We don’t sell personal information, and we don’t use uploaded documents for advertising, profiling or training AI models.
Documents uploaded to a customer
Files a sender uploads are delivered to the receiving customer, who is responsible for how they use and keep them, including under the Gramm-Leach-Bliley Act and other laws that apply to their business. We act as a service provider to that customer. We access uploaded files only to provide or support the service, to protect its security, or when the law requires it.
Who we share information with
- Microsoft hosts the service and stores uploaded files (Microsoft Azure and Microsoft 365).
- Stripe processes payments.
- Authorities, when the law requires it, or to protect the rights, property or safety of our customers, senders or us.
- A successor business, if M365 Vault is sold or merged, under the same protections described here.
How long we keep information
M365 Vault is a delivery tool, not long-term storage. Customers should download files and remove them from their folder once received, and we may remove files that remain in folders. We keep account and payment records as long as needed to provide the service and to meet tax, accounting and legal requirements.
Security
Files are encrypted in transit (TLS) and at rest in Microsoft’s cloud, and customer folders open only after a Microsoft Entra ID sign-in. See Security & compliance. No system is perfectly secure. If we learn of a breach affecting your information, we’ll notify you as the law requires.
Your choices
You can ask us to access, correct or delete your personal information by emailing info@m365vault.com. Senders who want a file removed should contact the loan officer they sent it to. Depending on where you live, you may have additional rights under state law, and we’ll honor them.
Children
M365 Vault is a business service and isn’t directed to children under 13.
Changes
If we change this policy, we’ll post the new version here with a new date, and tell customers by email about any material change.