Security

What we hold, and how it is kept.

Your Vaile account keeps the figures and dates its tools work out for you. It never holds your money or a password, and it holds no documents: your accounts, super and policies stay with your bank, your fund and your insurer.

We never hold your passwords

You sign in with Google or with a link we email you. There is no Vaile password, so there is no password store here to take.

What you type is not kept

The details you enter are used to work out your answer and are not stored. With an account, only the answer’s own figures and dates are kept. Without one, nothing is.

Kept in Sydney

The figures your account keeps, and the service that works them out, are in Google Cloud’s Sydney region.

Yours to see and delete

Ask us and we will show you everything your account holds, or delete it. Deleting takes it all, in one step.

How it is built

Each account holds only its own figures.

Signing in is Google’s.

Accounts run on Google’s Firebase Authentication. A signed-in member’s request carries a token from it, checked on our server before anything is kept or read. A visitor’s request carries none, and nothing from it is kept.

Each account reads only its own figures.

What an account keeps is filed under that account alone, and the server looks it up from the checked sign-in, never from anything the browser claims.

Encrypted in transit and at rest.

Every page and request is served over HTTPS only. What your account keeps is encrypted where it is stored.

No trackers.

No analytics, no advertising and no tracking across other sites. The pages, fonts and scripts are all served by us. The only other company the site talks to is Google, to sign you in and keep you signed in.

Access is limited.

Only the people who run Vaile’s systems can reach them, each with their own account. There is no shared login.

Documents are not held yet.

Adding your documents comes next. Until it opens, no registration notice, contract, payslip, identity document or health record is collected or held.

If something goes wrong

If there is a breach

If a breach of your information is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. To report a security problem, email hello@vaile.com.au.

Set up for free.

Sign in with Google or a link we email you.

Set up for free