Privacy Policy

Effective date: June 4, 2026

Last updated: May 4, 2026

Get Shelter LLC (“Shelter,” “we,” “us,” or “our”) operates this website, providing a way for people to securely store personal information and give access to their trusted contacts.  This Privacy Policy describes how we collect, use, and share information when you visit our website, place an order, or otherwise interact with us.

By using our website or purchasing our products, you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly to us, including:

  • Identifiers — email address, name, and billing address.
  • Financial information — payment method type and last four digits of card number (full card details are handled by our payment processor and never stored on our servers).
  • Communications — messages you send us via email or contact forms.

We also collect certain information automatically when you visit our website:

  • Internet or network activity — pages visited, time spent, referring URLs, browser type, device information, and IP address.
  • Cookies and similar technologies — see Section 5 below.

We encrypt and store information that you upload to Shelter in each of the categories, e.g. Finances, Physical Assets, etc., but we cannot view it because it can only be decrypted with your password and we don’t know your password.

Our employees can only see the following data:

  • Account creation and last login timestamps.
  • The count of vault items in each category.
  • File sizes (if applicable).
  • Subscription status and payment history.
  • The names and email addresses of your Trusted Contacts and their current access status.

Sensitive Personal Information. We do not intentionally collect sensitive personal information as defined under the CCPA/CPRA. If you believe you have submitted such information to us, please contact us at contact@getshelter.co so we can delete it.

12-Month Disclosure. In the preceding 12 months, we have collected the categories of personal information listed above. We have disclosed identifiers to service providers for payment processing.

2. How We Use Your Information

We use the information we collect to:

  • Send communications regarding authentication, trusted contact status, subscription, general info, promotions, etc.
  • Maintain and improve our website and product offerings.
  • Detect and prevent fraud or other harmful activity.
  • Comply with legal obligations.
  • Send promotional communications, if you have opted in (you may opt out at any time).
  • Conduct internal research and analytics for security auditing and product performance analytics using aggregated or de-identified data. De-identified data has been processed such that it can no longer reasonably identify any individual, and we maintain technical and organizational safeguards against re-identification.
  • Show you advertisements for our products on third-party websites and social media platforms based on your interactions with our website.
  • Measure the effectiveness of our advertising campaigns and understand how users interact with our ads.

3. Sharing Your Information

We do not sell your personal information. We may share your information with:

  • Service providers — third parties that help us operate our business, such as payment processors and email delivery services. These parties are contractually restricted to using your information only to perform services on our behalf.
  • Advertising and Analytics Partners — Only for public-facing landing pages, we may share identifiers and internet activity (such as IP addresses and browsing behavior) with third-party advertising partners, including Meta and Google. These partners use this information to serve you relevant ads on other websites (cross-context behavioral advertising) and to provide us with analytics. We do not share this information for logged in users accessing vaults.
  • Legal authorities — when required by law, subpoena, or to protect our rights. While we comply with valid legal orders, our zero-knowledge architecture ensures that we cannot provide unencrypted vault content to any third party, including law enforcement, as we do not possess the keys to decrypt it.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Payment Information

Payment card details are processed by our third-party payment processor and are not stored on our servers. We receive only a transaction token and the last four digits of your card number.

5. Cookies

We use the following categories of cookies:

  • Essential — required for the website to function (e.g. authentication). These cannot be disabled without breaking core functionality.
  • Analytics — help us understand how visitors use the site (e.g., page views, traffic sources). Data collected is aggregated and not linked to individual identities.
  • Marketing — allows us to run cross-context behavioral ad campaigns, such as by placing third-party tracking pixels on this site.

You can control or disable non-essential cookies through your browser settings. Disabling essential cookies may affect site functionality such as keeping items in your cart.

6. Do Not Track & Opt-Out Signals

Our website does not currently take specific technical action in response to browser-based “Do Not Track” (DNT) or “Global Privacy Control” (GPC) signals. We will revisit this as regulations evolve.

7. Data Retention

We retain personal information as follows:

Account data:

  • Automatic deletion – Your data will be retained while your subscription is active, plus a 12-month grace period. The data will be permanently and irretrievably purged after this period.
  • Manual deletion – You may request deletion at any time (see Section 9).

Subscription history and payment metadata — retained for seven years to comply with federal tax laws and food safety record-keeping requirements.

Technical usage data (IP addresses, cookie identifiers) — deleted after 12 months if you do not return to our site.

8. Children’s Privacy

Our website and products are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

9. Your Rights and Choices

Depending on your location — including if you are a California resident under the CCPA/CPRA — you may have the right to:

  • Know — request disclosure of the categories and specific pieces of personal information we have collected about you in the preceding 12 months.
  • Access — obtain a copy of your personal information in a portable format.
  • Correct — request that we correct inaccurate information.
  • Delete — request deletion of your personal information, subject to certain exceptions (e.g., legal obligations).
  • Opt out of selling/sharing — we do not sell personal information, but do share with partners for cross-context behavioral advertising.
  • Opt out of marketing emails — click “Unsubscribe” in any marketing email or contact us directly.
  • Non-discrimination — we will not deny you goods or services, charge you different prices, or provide a different quality of service because you exercised any of these rights.

Identity Verification. To protect your information, we will verify your identity before fulfilling access, correction, or deletion requests. Verification is typically done by confirming the email address associated with your account. We may request additional information if we are unable to verify your identity through email alone.

Authorized Agents. California residents may designate an authorized agent to submit a rights request on their behalf. We will require written proof of the agent’s authorization and may verify your identity directly before honoring the request.

To exercise any of these rights, contact us at contact@getshelter.co or use the form on our Contact page.

10. Security

We use a zero-knowledge security architecture, including AES-256 for data at rest and TLS encryption for data in transit, to protect your personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last Updated” date at the top of this page. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: contact@getshelter.co
  • Web form: getshelter.co/contact
  • Mail:  PO Box 1544, Silver Spring, MD 20915