Privacy Policy

Last updated: March 2026

1. Introduction

Vektora Labs (Fisher Pikeman LLC) ("we," "us," "our") operates the VektoraOS platform at vektoraos.com and app.vektoraos.com. This Privacy Policy explains how we collect, use, store, and protect your information when you use our AI agent workforce platform.

2. Information We Collect

Account Information: When you sign up, we collect your name, email address, phone number, company name, company address, role, industry, and timezone.

Agent and Task Data: We store the data you provide to your AI agents, including task descriptions, uploaded documents, knowledge base files, agent memory entries, and task results generated by your agents.

Usage Data: We collect information about how you use VektoraOS, including pages visited, features used, agents deployed, tasks submitted, API calls made, and token consumption.

Payment Information: Payment processing is handled by Stripe. We do not store credit card numbers directly. Stripe provides us with a customer ID, subscription status, and payment history.

3. How We Use Your Information

• To operate and maintain the VektoraOS platform and your AI agents
• To process your subscription payments through Stripe
• To send transactional emails (verification codes, password resets, billing receipts)
• To provide customer support and respond to your inquiries
• To improve our product, develop new features, and fix bugs
• To monitor system performance, security, and uptime

4. Data Storage and Security

Your data is stored on secure cloud infrastructure with the following protections:

• Encryption at rest: All databases are encrypted using AES-256
• Encryption in transit: All connections use TLS 1.2+
• Tenant isolation: Each customer's data is stored in a separate tenant. No other customer can access your agents, tasks, memories, or files
• OAuth token encryption: Third-party integration tokens (Google, Twilio) are encrypted with AES-256 before storage
• Agent memory encryption: Agent memory entries are encrypted at rest

5. Third-Party Services

We use the following third-party services to operate VektoraOS. Each has their own privacy policy:

• Anthropic (Claude) — AI model provider. Processes task prompts and generates agent responses. Data is not used to train their models under our API agreement.
• Stripe — Payment processing. Handles credit card information, subscriptions, and invoices.
• SendGrid — Transactional email delivery. Sends verification codes, password resets, and welcome emails.
• Twilio — Voice and SMS communications. Enables agents to make phone calls and send text messages on your behalf.
• ElevenLabs — Voice synthesis. Enables voice cloning and text-to-speech for agent voice features.

6. Data Retention

Your data is retained for the duration of your active account. If you cancel your subscription:

• Your agents are suspended at the end of the billing period
• Your data is retained for 90 days after cancellation so you can export it
• After 90 days, all agent data, memories, task history, and uploaded files are permanently deleted
• Billing records are retained for 7 years as required by tax law

7. Your Rights

You have the right to:

• Access your data: View all data we store about you from the Settings page or via the API
• Export your data: Download your agent data, task history, and knowledge base files at any time
• Delete your account: Request complete account deletion by emailing hello@vektoraos.com
• Correct inaccuracies: Update your profile information from the Settings page
• Data portability: Export your data in standard formats (JSON, CSV)

8. Cookies

We use only essential cookies required for the service to function:

• Authentication cookies: JWT tokens stored in httpOnly secure cookies for session management
• Session cookies: Maintain your login state across page loads

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. GDPR Compliance

For users in the European Economic Area, we comply with the General Data Protection Regulation:

• Lawful basis: We process your data based on contractual necessity (providing the service you signed up for) and legitimate interest (improving our product)
• Data portability: You can export all your data in machine-readable format
• Right to erasure: You can request deletion of all your data at any time
• Data protection officer: Contact us at hello@vektoraos.com for any GDPR-related requests

10. AI Processing Disclosure

VektoraOS uses artificial intelligence to process your business tasks. When you submit a task to an AI agent:

• Your task description and relevant context (business info, knowledge base documents, agent memory) are sent to Anthropic's Claude API for processing
• Anthropic processes the data solely to generate a response and does not use it for model training under our API agreement
• The AI-generated response is stored in your tenant's task history
• You are responsible for reviewing AI-generated outputs before acting on them, especially for legal, medical, financial, or other regulated content

11. CCPA Compliance (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

• Right to know: You can request a list of the categories and specific pieces of personal information we have collected about you
• Right to delete: You can request deletion of your personal information
• Right to opt-out: We do not sell your personal information to third parties
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights

To exercise these rights, contact us at hello@vektoraos.com.

12. Children's Privacy

VektoraOS is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at hello@vektoraos.com and we will promptly delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email at least 30 days before they take effect. Your continued use of VektoraOS after changes constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or how we handle your data:

Vektora Labs (Fisher Pikeman LLC)
Email: hello@vektoraos.com