<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
        xmlns:xhtml="http://www.w3.org/1999/xhtml">
   <!-- Marketing Pages -->
   <url>
      <loc>https://vaultgy.com/</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>weekly</changefreq>
      <priority>1.0</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/how-it-works</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>weekly</changefreq>
      <priority>0.9</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/contact</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.8</priority>
   </url>

   <!-- Authentication Pages (Public) -->
   <url>
      <loc>https://vaultgy.com/login</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.7</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/signup</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.7</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/sign-in-as-merchant</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.6</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/sign-in-as-customer</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.6</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/forgot-password</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>yearly</changefreq>
      <priority>0.3</priority>
   </url>

   <!-- Legal Pages -->
   <url>
      <loc>https://vaultgy.com/privacy</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.5</priority>
   </url>
   <url>
      <loc>https://vaultgy.com/terms</loc>
      <lastmod>2025-11-06</lastmod>
      <changefreq>monthly</changefreq>
      <priority>0.5</priority>
   </url>

   <!-- 
      EXCLUDED FROM SITEMAP:
      - All /dashboard/* routes (merchant-only, authenticated)
      - All /customer/* routes (customer-only, authenticated)
      - All /embed/* routes (meant for iframes, not search engines)
      - All /checkout/* routes (transactional, not indexable)
      - All /api/* routes (API endpoints, not web pages)
      - /my-customers (authenticated merchant route)
      - /products (authenticated merchant route)
      - /payment-links (authenticated merchant route)
      - /reports (authenticated merchant route)
      - /settings (authenticated merchant route)
      - /verify-email (transactional page)
      - /reset-password (transactional page)
      - /unauthorized (error page)
      - /404 (error page)
   -->
</urlset>
