Privacy Policy
Last Updated: December 27, 2025
1. Introduction
VAAS-X ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our episodic memory platform and related services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, billing information
- Technical Data: Code you scan, smart contracts you analyze, documents you index
- Communication: Support tickets, demo requests, feedback
2.2 Automatically Collected Information
- Usage Data: API calls, query patterns, feature usage
- Device Information: IP address, browser type, operating system
- Performance Metrics: Query latency, detection rates, system performance
3. How We Use Your Information
- Provide and maintain our services
- Improve detection accuracy and performance
- Communicate with you about your account
- Detect and prevent security threats
- Comply with legal obligations
4. Data Security
4.1 OKE Encryption
For Enterprise customers, we offer Orthogonal Key Encryption (OKE) which allows us to perform similarity searches on your data WITHOUT EVER DECRYPTING IT. Your data remains encrypted at rest, in transit, and during processing.
4.2 Security Measures
- Encryption at rest (AES-256)
- Encryption in transit (TLS 1.3)
- Regular security audits
- Access controls and authentication
- Data isolation per customer
5. Data Retention
- Active Accounts: Data retained while account is active
- Closed Accounts: Data deleted within 90 days of account closure
- Legal Hold: Data retained if required by law or ongoing investigation
6. Data Sharing
We do NOT sell your data. We may share data only in these circumstances:
- Service Providers: Cloud hosting, payment processing (under strict contracts)
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger or acquisition (with notice)
7. Your Rights
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Export: Download your data in portable format
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, contact privacy@vaasx.com
8. Cookies and Tracking
We use minimal cookies for:
- Authentication and session management
- Analytics (anonymized)
- Security and fraud prevention
You can disable cookies in your browser settings.
9. International Data Transfers
Your data may be processed in the UK, EU, or US. We ensure adequate data protection through:
- Standard Contractual Clauses (SCCs)
- GDPR compliance
- Data Processing Agreements (DPAs)
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes via email or service notification.
12. Contact Us
For privacy-related questions or concerns:
GDPR Representative: For EU data subject requests, contact privacy@vaasx.com
Data Protection Officer: dpo@vaasx.com