Business Asset Vault — Privacy Policy

Last updated: 4 October 2026

1. Who we are

Business Asset Vault (“BAV”, “we”, “us” or “our”) is a service operated by:

JK AND PIP ENTERPRISES PTY. LTD.
ACN 608 881 803
PO Box 5431
Alexandra Hills QLD 4161
Australia

Privacy and support enquiries may be sent to:

[email protected]

BAV’s software is currently operating in Founder/Beta testing. The paid Asset-to-Income Snapshot is a separate service.

2. Who BAV is for

BAV is intended for people aged 18 years or older.

BAV is an Australian-operated online service intended to be available internationally. We may restrict or discontinue access in particular countries or regions where legal, sanctions, compliance, technical or service limitations make availability impractical.

3. What this Privacy Policy covers

This Privacy Policy explains how BAV collects, holds, uses and discloses personal information when you:

  • create or use a BAV account;

  • use your private Vault;

  • connect an email account;

  • use BAV's Discovery features;

  • contact us for support or privacy matters;

  • submit a website enquiry or purchase an Asset-to-Income Snapshot;

  • otherwise interact with BAV.

Different privacy rights may apply depending on where you live. We will respect mandatory privacy rights that apply to you under applicable law.

4. Information we may collect

Depending on how you use BAV, we may collect or hold information such as:

Account and contact information

This may include:

  • your name;

  • email address;

  • profile information supplied through an authentication provider;

  • account identifiers;

  • authentication and security information;

  • communications you send to BAV.

Website enquiries and paid Snapshots

When you submit a Snapshot enquiry, we collect your email address and your description of what you would like help with. You may also provide your first name and tell us where you heard about BAV. Those two fields are optional.

Our form also records submission details such as the date, time, timezone and page from which the enquiry was submitted.

We use this information to understand your request, reply by email, explain the Snapshot offer and keep a record of our communications. If you purchase, we also use relevant information you provide to prepare and deliver your agreed Snapshot.

Enquiries are stored through our website and customer-management platform, GoHighLevel, accessed through Scalendo. Submission details are also sent to our notification inbox. Our form, customer-management and email providers process this information to support these activities. Overseas handling is explained in section 13.

Submitting an enquiry does not, by itself, give consent to ongoing marketing emails.

Please do not include passwords, private inbox content or sensitive personal information in the enquiry form.

Enquiry and purchase records follow the retention rules in section 14. Deleting a BAV app account does not automatically delete separate enquiry, email or purchase records. You can contact [email protected] to request access, correction or deletion, subject to applicable law.

Vault information

This may include information you create, confirm or organise in BAV, such as:

  • Assets;

  • Candidates and discoveries;

  • subscriptions;

  • product or service names;

  • vendors;

  • dates;

  • notes;

  • categories;

  • other information associated with your Vault.

Connected-email information

If you choose to connect Gmail and deliberately start a Discovery search, BAV may access limited email-derived information needed to help identify possible business assets.

BAV's current Gmail Discovery feature is designed around read-only access and email metadata/evidence. It does not intentionally retrieve email message bodies or attachments for the Discovery process.

Connecting Gmail does not automatically begin a search. You must deliberately start the search.

Technical and security information

We may collect information reasonably necessary to operate and protect BAV, such as:

  • device/browser information;

  • login and session information;

  • security events;

  • error and diagnostic information;

  • basic service-usage information.

5. How we collect information

We may collect information:

  • directly from you;

  • when you create or use your BAV account;

  • through authentication providers you choose to use;

  • when you deliberately connect an email account;

  • when you deliberately run a Discovery search;

  • through normal security and operational processes;

  • when you contact us.

BAV does not treat merely connecting an email account as permission to continuously search that mailbox.

6. Why we use personal information

We may use personal information to:

  • create and maintain your account;

  • authenticate you;

  • provide and operate your private Vault;

  • provide Discovery and asset-organisation features;

  • save and display information you choose to add or confirm;

  • secure BAV and prevent abuse or fraud;

  • troubleshoot errors;

  • provide support;

  • respond to privacy requests or complaints;

  • comply with legal obligations;

  • analyse and improve BAV using information in ways permitted by this Policy and applicable law.

7. Gmail and Google user data

Gmail Discovery is an optional feature.

When you connect Gmail and start a search, BAV uses authorised read-only access to look for evidence that may help identify business tools, subscriptions, products or other possible assets you already own.

BAV does not use its Gmail connection to:

  • send email;

  • delete email;

  • modify email;

  • use your mailbox for unrelated advertising;

  • build unrelated marketing profiles;

  • determine which advertisements or unrelated offers should be shown to you;

  • sell Gmail-derived information to data brokers, advertisers or other third parties.

Information obtained or derived from your connected Gmail account is used only to provide and improve the BAV Discovery features you have chosen to use, together with permitted security and legal purposes.

BAV's use of information received through Google Workspace APIs will adhere to the Google Workspace User Data and Developer Policy, including its Limited Use requirements.

BAV will not use Google-derived user data to train or improve a general-purpose artificial intelligence or machine-learning model outside the permitted user-facing use case.

8. Candidates are not automatically Assets

Discovery evidence does not automatically become an Asset.

BAV may identify information that appears relevant and present it to you as a Candidate or discovery for review.

You remain responsible for confirming whether a discovery actually relates to something you own and whether it should become part of your Vault.

9. Marketing communications

Your normal BAV account/contact email may be used for:

  • account communications;

  • security notices;

  • service messages;

  • support;

  • other operational communications.

Where you have consented, or where applicable law otherwise permits, we may also send BAV-related marketing communications.

Marketing communications will provide an appropriate way to unsubscribe.

Information obtained or derived from your connected Gmail account for Discovery will not be used for unrelated marketing or advertising.

10. Cookies and similar technologies

BAV may use cookies or similar technologies that are reasonably necessary for:

  • authentication;

  • sessions;

  • security;

  • fraud prevention;

  • essential service functionality.

BAV does not currently use advertising cookies, behavioural advertising tracking or third-party advertising trackers.

If this materially changes, we will review our privacy disclosures and consent requirements before implementing the change.

11. Aggregated and de-identified information

We may use aggregated or de-identified information to:

  • operate BAV;

  • understand service performance;

  • identify product friction;

  • improve features;

  • improve security;

  • evaluate overall Discovery performance.

We will use this information in a form that is not reasonably capable of identifying an individual user.

Google-derived information remains subject to Google's applicable user-data requirements.

12. Third-party service providers

BAV relies on trusted third-party service providers for functions such as:

  • cloud hosting;

  • authentication;

  • email/OAuth connectivity;

  • databases;

  • security;

  • operational infrastructure and support.

We may provide or make information available to such providers where reasonably necessary for them to perform services for BAV.

We do not publish our complete infrastructure architecture in this Privacy Policy.

We take reasonable steps to use reputable providers and appropriate safeguards.

13. Overseas processing

Because BAV is an international online service and uses cloud-based service providers, personal information may be processed or stored outside Australia.

The countries involved may change as service providers and infrastructure change.

Where applicable, we take reasonable steps to protect personal information and to use appropriate safeguards for overseas handling.

14. How long we keep information

We retain personal information only for as long as reasonably necessary to:

  • provide BAV;

  • maintain your account;

  • fulfil the purpose for which the information was collected;

  • meet legal or accounting requirements;

  • protect security;

  • investigate fraud or misuse;

  • resolve disputes;

  • enforce agreements.

When information is no longer reasonably required, we will delete or de-identify it where appropriate and subject to applicable law and provider/platform requirements.

15. Disconnecting Gmail

You may disconnect a connected Gmail account from BAV.

When you disconnect Gmail through BAV, BAV removes its stored usable connection credentials so that BAV can no longer use that stored connection to access the account.

Disconnecting Gmail inside BAV may not automatically remove the separate authorisation recorded within your Google Account.

If you also want to remove that Google-side authorisation, you may need to revoke Business Asset Vault separately through your Google Account permissions.

16. Account deletion

If you delete your BAV account, BAV's intended deletion rule is to permanently delete your:

  • Vault data;

  • connected-email credentials;

  • Candidates;

  • Assets;

  • other account-linked records,

subject only to information that BAV must retain for legal, security, fraud-prevention or accounting reasons.

Some information may therefore be retained where applicable law requires or permits it.

17. Access, correction and copies of your information

You may contact us to:

  • ask what personal information BAV holds about you;

  • request correction of inaccurate information;

  • request deletion where applicable;

  • request access to or a copy of your personal information and core Vault data.

Where applicable law gives you additional access, portability or deletion rights, we will respond in accordance with those requirements.

Providing you with your data does not require BAV to provide proprietary material such as:

  • source code;

  • algorithms;

  • ranking logic;

  • internal methods;

  • proprietary grouping or deduplication systems;

  • prompts;

  • agent instructions;

  • confidential business processes;

  • other BAV intellectual property.

18. Security

BAV uses reasonable technical and organisational safeguards designed to protect personal information against:

  • unauthorised access;

  • loss;

  • misuse;

  • alteration;

  • unauthorised disclosure.

No internet-based service can guarantee absolute security.

If a data breach or security incident occurs, BAV will assess it promptly and notify affected individuals, regulators, providers or other parties where required by applicable law or applicable platform obligations.

19. Sale, merger or restructuring

If BAV is sold, merged, restructured or transferred to another operator, relevant personal information and business records may form part of that transaction, subject to applicable privacy law and appropriate safeguards.

Google Workspace-derived user data is subject to additional Google restrictions. Where Google policy requires prior user consent before such data can transfer as part of a merger, acquisition or sale, BAV will obtain the required consent or otherwise handle that data in accordance with Google's requirements.

20. Founder/Beta software and paid services

BAV’s software is currently at the Founder/Beta stage. Features may change, and errors or interruptions may occur.

BAV helps users discover and organise business assets. It does not replace original source records held in email accounts, vendor accounts or other source systems.

The paid Asset-to-Income Snapshot is a separate service described in the written offer you accept before payment. This Privacy Policy applies to personal information handled for both the software and the Snapshot service.

21. Privacy complaints

If you have a privacy concern or complaint, contact:

[email protected]

Please provide enough information for us to understand and investigate your concern.

We will respond within a reasonable timeframe and in accordance with applicable law.

Where applicable, you may also have the right to complain to a privacy regulator in your jurisdiction.

22. Changes to this Privacy Policy

We may update this Privacy Policy when:

  • BAV's features change;

  • our data-handling practices change;

  • service providers or legal requirements change;

  • additional privacy disclosures are required.

Where a change is material, we will take reasonable steps to bring it to users' attention.

The current version will display its effective or last-updated date.

23. Contact us

Business Asset Vault
A service operated by JK AND PIP ENTERPRISES PTY. LTD.
ACN 608 881 803

PO Box 5431
Alexandra Hills QLD 4161
Australia

Email: [email protected]