Privacy Policy

Account and authentication. Your email address and the authentication credentials used to sign in. Passwords are handled by our authentication provider and stored in hashed form; we never receive or store your password in plain text.

Profile. Your display name and preferences such as time zone and daily-capacity settings.

Workspace content. The content you create or bring into VectorOS: opportunities, tasks and commitments, contacts and people, projects, goals, meetings, notes, and uploaded or imported files and documents. This is stored to provide the product to you.

AI requests and conversations. The text of prompts, captures, and content you submit to AI-assisted features, together with the results returned, so the feature can respond and so you can review its history.

Usage and diagnostics. Limited operational information — such as feature usage, error and request logs, and approximate activity timestamps — used to operate, secure, and improve the service. VectorOS does not currently use third-party advertising or cross-site tracking.

Device and technical information. Standard information our infrastructure providers process to deliver and secure the service, such as IP address, device and browser type, and request metadata.

Payment information. Subscriptions are processed by Stripe. Your payment card details are collected and stored by Stripe, not by VectorOS; we receive only limited billing status and identifiers needed to manage your subscription.

VectorOS can import information you provide — such as documents, calendars, contacts, email, and tasks — and may, where you choose to connect them, integrate with third-party services (for example calendar, email, storage, or productivity tools). We access only the data needed for the feature you enable, and only with your authorization.

Imports and AI-assisted extraction (including document understanding and optical character recognition) can be incomplete or inaccurate — for example a missed, duplicated, or misread entity. VectorOS is designed so that you review imported information before it is saved into your workspace. You are responsible for confirming what you keep.

VectorOS intelligence — importing and understanding your documents, extracting entities, recommendations and their explanations, signals, prioritization, brain dumps, and commands — is deterministic and runs on our own infrastructure. Your workspace content is not sent to any third-party AI provider to power these features. The one exception is optional voice transcription: if you use it, the audio you submit is sent to OpenAI solely to return a transcript. We do not use your content to train third-party foundation models. See our AI Transparency page for details.

We use your information to operate and provide VectorOS — organizing your work and surfacing what deserves your attention; to process subscriptions and billing; to provide support; to maintain security, prevent abuse, and debug problems; to improve the service; and to comply with legal obligations. We do not sell your personal information, and we do not use your workspace content for advertising.

Where the GDPR or UK GDPR applies, we process personal data on these bases: to perform our contract with you (providing the service and billing); our legitimate interests (securing, maintaining, and improving the service, and preventing abuse); your consent (for optional features you choose to enable, such as connected accounts or certain AI features); and compliance with legal obligations.

VectorOS uses cookies that are strictly necessary to keep you signed in and to operate the service securely. We do not currently use advertising or cross-site tracking cookies. For details, see our Cookie Policy.

We rely on a small number of vetted providers to run VectorOS. Each processes data on our behalf under its own terms and security program:

• Supabase — database, authentication, and file storage. Privacy.
• Vercel — application hosting and delivery. Privacy.
• Stripe — subscription and payment processing (PCI-compliant). Privacy.
• OpenAI — transcription of audio you submit to optional voice transcription (no other Vector feature uses it). Privacy.

Transactional and authentication emails (such as confirmations and password resets) are delivered through our authentication and infrastructure providers. If we add or change a material processor, we will update this list.

We do not sell your personal information. We share information only: with the service providers above to operate VectorOS; where you direct us to (for example, a connected account you enable); in connection with a business transfer such as a merger or acquisition, subject to this policy; and where required by law or to protect the rights, safety, and security of our users and the service.

We retain your account and workspace data while your account is active. You can delete individual items in the app at any time. When you delete your account, we delete or de-identify your associated data, subject to limited retention required for legal, security, tax, or billing purposes (for example, transaction records Stripe is required to keep). Backups are cycled out on a rolling basis.

Subject to applicable law, you may: access the personal information we hold about you; correct inaccurate profile information from within the app; export a copy of your workspace data; delete individual items or your entire account; and object to or restrict certain processing. To make a request we cannot complete in-app, contact vectoros.app@gmail.com. We may need to verify your identity before acting on a request.

Canada (PIPEDA). You may access and correct your personal information and ask about our handling of it. You may also contact the Office of the Privacy Commissioner of Canada.

EEA / UK (GDPR). You have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority. Our legal bases are described above.

California (CCPA/CPRA). You have rights to know, access, correct, and delete personal information, and to opt out of “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined, and we will not discriminate against you for exercising your rights.

We use technical and organizational safeguards designed to protect account data, including encryption in transit, authenticated access, and database access controls (row-level security) that scope each account’s records to that account. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See our Security page.

Our providers may process and store information in Canada, the United States, and other regions where they operate. Where required, transfers rely on appropriate safeguards such as standard contractual clauses. By using VectorOS you understand your information may be processed in these locations.

VectorOS is intended for adults and is not directed to children. Do not use VectorOS if you are under the age of majority in your jurisdiction, or under 16, whichever is greater.

We may update this policy from time to time. Material changes will be reflected by updating the date above, and your continued use of VectorOS constitutes acceptance of the updated policy.

Questions about this policy, or want to exercise a privacy right? Contact vectoros.app@gmail.com.