'/%3e%3c!--%20outer%20dial%20ring%20--%3e%3ccircle%20cx='32'%20cy='32'%20r='22'%20stroke='url(%23rxRing)'%20stroke-width='2.25'%20opacity='0.85'/%3e%3ccircle%20cx='32'%20cy='32'%20r='17'%20stroke='%23a5b4fc'%20stroke-width='1'%20opacity='0.45'/%3e%3c!--%20tick%20marks%20--%3e%3cg%20stroke='%23c7d2fe'%20stroke-width='1.5'%20stroke-linecap='round'%20opacity='0.7'%3e%3cline%20x1='32'%20y1='6'%20x2='32'%20y2='10'/%3e%3cline%20x1='32'%20y1='54'%20x2='32'%20y2='58'/%3e%3cline%20x1='6'%20y1='32'%20x2='10'%20y2='32'/%3e%3cline%20x1='54'%20y1='32'%20x2='58'%20y2='32'/%3e%3c/g%3e%3c!--%20central%20R%20monogram%20--%3e%3cpath%20d='M24%2020%20H35%20c4.4%200%208%203.4%208%207.6%200%203.2-2.1%205.9-5%207l6%209.4%20h-5.6%20l-5.4-8.6%20H29%20V44%20H24%20Z%20M29%2024.4%20V30.4%20H35%20c1.8%200%203.2-1.4%203.2-3%200-1.7-1.4-3-3.2-3%20Z'%20fill='%23f5f3ff'/%3e%3c!--%20dial%20spoke%20/%20handle%20--%3e%3ccircle%20cx='32'%20cy='32'%20r='3.2'%20fill='%23f5f3ff'/%3e%3cline%20x1='32'%20y1='32'%20x2='46'%20y2='46'%20stroke='%23f5f3ff'%20stroke-width='2.4'%20stroke-linecap='round'/%3e%3c/svg%3e){kind=small}
Privacy Policy
Last updated: May 17, 2026
Who we are
Rexora Vault is a desktop application published by We Recover Data LLC ("we", "us"). It lets you mount a hardened WeRecoverData vault server as a local drive on your computer.
What we collect
- Account data — if you sign in to the web admin, we store your email, an opaque user ID, and role assignments via our authentication provider.
- Vault server configuration — server URL, admin username, and admin display name are saved on your device so the app can connect. The admin password is encrypted by your operating system's keychain (Electron
safeStorage) and never leaves the device in plain text. - Vault contents — files you upload are stored on the WeRecoverData vault server you selected. We do not copy them anywhere else.
- Audit logs — administrative actions taken from the Admin console (creating users, repairing permissions, closing accounts) are logged with the actor's user ID and a timestamp.
What we don't collect
- No third-party analytics, ad SDKs, or fingerprinting in the desktop app.
- No telemetry on the contents of your vault.
- No copy of your vault credentials on our servers.
Where data lives
- On your device: profiles, server configuration, OS-keychain-encrypted passwords, app cache. Removed when you uninstall Rexora Vault (see the uninstall documentation).
- On WeRecoverData vault servers: the files you upload, kept under append-only (WORM) policy.
- On our authentication backend: your sign-in email, opaque user ID, role, and audit log entries.
Security
- All vault traffic is TLS-encrypted.
- Vault permissions are configured server-side as ransomware-safe by default.
- Admin passwords are stored using your operating system's keychain (DPAPI on Windows, Keychain on macOS, libsecret on Linux).
Your rights
You can request access to, correction of, or deletion of your account data by emailing privacy@werecoverdata.com. Closing your vault account removes that account from the vault server (see the Usage Policy for the deletion model).
Changes
We may update this policy as the product evolves. Material changes will be announced on the Updates page.
See also our Usage Policy — it covers client responsibilities, including backups and the limitation of liability for data loss.