Privacy Policy

What We Collect

• Account data: name, email address, and password hash.
• Scanned product data: page structure, screenshots, and DOM digests. These are screenshots of your product, not personal data of your end users.
• Chat transcripts: questions your end users ask and the answers we generate through the chat widget.
• Usage data: page views, feature usage, and general analytics to improve the Service.

How We Store It

Account and structured data is stored in PostgreSQL on Supabase, encrypted at rest. Screenshots are stored on Cloudflare R2. Embeddings for search are stored in pgvector. All data is transmitted over encrypted connections (TLS).

Who Has Access

Only the Vaeron team (currently one person) has access to the underlying infrastructure and data. We do not share, sell, or provide your data to third parties except as required to operate the Service (see Third-Party Services below).

Data Retention

While your account is active, all data is retained. If you delete your account, all associated data is permanently deleted within 30 days.

Your Rights

• Access: export your data through the admin panel.
• Correction: update your account data at any time.
• Deletion: one-click account and data deletion in settings.
• Portability: export your knowledge base and chat transcripts.

Cookies

We use one httpOnly session cookie for authentication. We do not use tracking cookies, analytics cookies, or third-party cookies.

Third-Party Services

• Anthropic (Claude API): used for AI analysis and chat. Your scanned data is sent to their API per their data processing terms.
• OpenAI: used for text embeddings only.
• Supabase: database hosting.
• Cloudflare: CDN and object storage (R2).
• Vercel: application hosting.
• Paddle: payment processing (when live).

Children

Vaeron is not intended for use by children under the age of 16. We do not knowingly collect personal data from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days in advance via email. Continued use of the Service constitutes acceptance of the updated policy.