Privacy Policy

Information you provide directly

• Account information — name, email address, and password when you create an account.
• Website URL — the URL you submit for auditing.
• Referral source — how you heard about us (optional, provided at registration).
• Payment information — processed entirely by Whop. We never see or store your card details.

Information collected automatically

• Log data — IP address, browser type, pages visited, and timestamps when you access our service.
• Session cookies — used to keep you signed in across page loads.
• Audit results — the structured output of audits you run. Results are stored persistently only for authenticated Pro users; free and single-report audit results are not retained after your session ends.

We use the information we collect to:

• Provide, operate, and maintain the VektorAI service.
• Send transactional emails — account verification, password reset, and payment receipts.
• Authenticate you and manage your session securely.
• Process payments and manage your subscription status via Whop.
• Store your audit history (Pro users only) so you can access and compare past audits from the dashboard.
• Detect and prevent abuse, fraud, and unauthorised access.
• Improve the service based on aggregate, anonymised usage patterns.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We rely on the following third-party services to operate VektorAI:

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt before storage — we never store plaintext passwords.
• All data is transmitted over HTTPS/TLS.
• Database access is restricted to application-level authenticated connections.
• Webhook signatures from Whop are verified using HMAC-SHA256 to prevent spoofed events.

No method of transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at the address below.

We retain your personal information for as long as your account is active or as needed to provide the service.

• Account data — retained until you delete your account or request deletion.
• Audit results — retained for the duration of your Pro account. You can delete individual audits at any time from the dashboard. Free and single-report results are not stored beyond your session.
• Payment records — retained for as long as required by applicable financial and tax regulations (typically 7 years).
• Log data — retained for up to 90 days for security and debugging purposes, then purged.

Depending on your location, you may have rights under applicable data protection laws (including GDPR and CCPA), such as:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete information.
• Deletion — request erasure of your personal data, subject to legal retention obligations.
• Portability — receive your data in a machine-readable format.
• Objection — object to certain types of processing, including direct marketing.
• Restriction — ask us to restrict processing in certain circumstances.

To exercise any of these rights, contact us at the email address in the Contact section below. We will respond within 30 days.

VektorAI uses a minimal set of cookies:

• Session cookie — an HTTP-only, secure cookie set by NextAuth to maintain your authenticated session. This cookie is strictly necessary and cannot be disabled if you wish to use the authenticated areas of the service.
• CSRF token — a security cookie used to prevent cross-site request forgery attacks.

We do not use advertising, tracking, or analytics cookies. We do not use third-party cookies for any purpose beyond the authentication services described above.

VektorAI is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. We encourage you to review this policy periodically. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: