Privacy Policy
Last Updated: 24 July 2026
1. Introduction
VAAS-X ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our episodic memory platform and related services.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, company name, billing information
- Operational Data: the structured data you ingest via Bootstrap or the API and its SDK -- for example sensor telemetry, device state, or agent actions and outcomes -- which is stored as structured episodic memory scoped to your account and device
- Communication: Support tickets, demo requests, feedback
2.2 Automatically Collected Information
- Usage Data: API calls, episode and query volume against your tier's limits, feature usage
- Device Information: IP address, browser type, operating system, and device identifiers you assign via the SDK
- Performance Metrics: Query latency, retrieval performance, system uptime
3. How We Use Your Information
- Provide and maintain our services
- Improve retrieval performance and platform reliability
- Communicate with you about your account
- Process payments via Stripe and manage subscriptions
- Detect and prevent platform abuse (e.g. rate-limit evasion, fraudulent signups)
- Comply with legal obligations
4. Data Security
4.1 Encrypted Search
We are developing proprietary technology that would allow similarity searches on your data WITHOUT EVER DECRYPTING IT, for custom Enterprise deployments. It is on our roadmap and not yet available through the standard hosted service -- contact us to confirm current availability before relying on it for a compliance requirement.
4.2 Security Measures
- Encryption at rest (AES-256)
- Encryption in transit (TLS 1.3)
- Regular security audits
- Access controls and authentication
- Data isolation per customer
5. Data Retention
- Active Accounts: Data retained while account is active
- Closed Accounts: Data deleted within 90 days of account closure
- Legal Hold: Data retained if required by law or ongoing investigation
6. Data Sharing
We do NOT sell your data. We may share data only in these circumstances:
- Service Providers: Cloud hosting, payment processing (under strict contracts)
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger or acquisition (with notice)
7. Your Rights
- Access: Request a copy of your data
- Correction: Update inaccurate information
- Deletion: Request deletion of your data
- Export: Download your data in portable format
- Opt-Out: Unsubscribe from marketing communications
To exercise these rights, contact privacy@vaasx.com
8. Cookies and Tracking
We use minimal cookies for:
- Authentication and session management
- Analytics (anonymized)
- Security and fraud prevention
You can disable cookies in your browser settings.
9. International Data Transfers
Your data may be processed in the UK, EU, or US. We ensure adequate data protection through:
- Standard Contractual Clauses (SCCs)
- GDPR compliance
- Data Processing Agreements (DPAs)
10. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes via email or service notification.
12. Contact Us
For privacy-related questions or concerns:
GDPR Representative: For EU data subject requests, contact privacy@vaasx.com
Data Protection Officer: dpo@vaasx.com