Legal

Privacy policy.

How Vektor handles your company's data, in plain words first and formal words below.

This page is a working draft pending legal review. It describes how the product is built to behave, but it is not yet a final, binding policy. Questions in the meantime: hello@onvektor.ai.

What Vektor connects to

Vektor connects to the Google Drive and Gmail accounts your company's administrator authorises (Microsoft 365 and Slack support are on the roadmap). WhatsApp is where people ask questions and receive answers, and conversations your company sets up with Vektor are ingested as a knowledge source, shown only to their members. Personal chats are never read.

What we process

  • Content from connected sources, indexed so questions can be answered from it.
  • Permission signals: for Drive, live per-file checks made as the asker at question time; for Gmail, the participants of a thread recorded at ingestion.
  • Questions people ask, stored in the audit log only as a one-way hash. Recent conversation context is retained briefly to support follow-up questions. Each query, permission-check outcome and citation is written to an append-only audit record.
  • Account details needed to run the service: names, work email addresses and WhatsApp phone numbers of invited users.

What we don't do

  • We don't sell your data, and your data does not train public AI models.
  • We don't show any user content that failed, or could not complete, a permission check.
  • We don't keep a separately maintained copy of your access rules.

Retention

Audit records carry a 12-month retention target. An automated retention and purge job is in progress; until it ships, deletion requests are handled manually via hello@onvektor.ai.

Sub-processors

Vektor runs on cloud infrastructure (designed for AWS Mumbai, with the most sensitive analysis region-locked to Bedrock in Mumbai), uses Google Workspace APIs to read connected content and check permissions, and connects to WhatsApp to send and receive messages. A complete, named sub-processor list will accompany the final policy.

Your choices

Your administrator can disconnect a source at any time, and individual access follows your company's own permissions: revoke someone's access in Drive, and Vektor's answers respect it from the next question.

Contact

Privacy questions: hello@onvektor.ai, or write to C-101, Centre Point Condominium, N.M. Joshi Marg, Lower Parel East, Mumbai 400013.