Privacy policy

1. Scope and role

This Privacy Policy explains how Vantra collects, uses, stores, and discloses personal information when you use the Vantra website, workspace app, billing flow, AI features, and connected integrations.

Vantra is generally the controller of account, billing, and product usage information that we collect for our own business purposes. For project content you add to the workspace, Vantra acts as the service provider or processor that hosts and processes data on behalf of the account owner and authorized users.

2. Information we collect

Depending on how you use Vantra, we may collect the following categories of information:

• Account data, such as your name, email address, password hash, profile image, plan tier, and account timestamps.
• Workspace content, such as projects, tasks, notes, shared docs, comments, decisions, mentions, notifications, and automation definitions or run logs.
• Billing data, such as Stripe customer identifiers, subscription identifiers, price identifiers, plan status, and billing period information.
• Integration data, such as connection labels, authorized scopes, external account identifiers, encrypted access or refresh tokens, encrypted secrets, webhook events, sync metadata, and integration execution logs.
• AI feature inputs and outputs, such as prompts, task context, automation context, and generated project or task content you request through the product.
• Technical and product usage data, such as sign-in sessions, timestamps, browser or device signals, IP-based request metadata, and product analytics generated when pages are used.

3. How we use information

We use personal information to operate, secure, and improve Vantra, including to:

• Create and manage accounts, sessions, and access controls.
• Host workspaces and display tasks, docs, notifications, approvals, and collaboration history.
• Run automations, process workflow triggers, and maintain integration or execution logs.
• Provide billing, subscriptions, checkout, and customer support.
• Generate AI-assisted project, task, or automation outputs when you request them.
• Monitor product performance, prevent abuse, debug failures, and improve security.
• Comply with legal obligations, enforce our terms, and protect users and the service.

4. Legal bases for processing

If you are in the EEA, UK, or another jurisdiction requiring a lawful basis, we rely on one or more of the following:

• Performance of a contract, including providing the product you sign up for.
• Legitimate interests, such as securing the service, improving the product, and preventing abuse.
• Consent, where a feature or law requires it.
• Compliance with legal obligations.

5. Integrations and third-party services

Vantra can connect to third-party services such as Stripe, Google Calendar, Gmail, GitHub, Notion, Vercel, and AI providers used to generate requested outputs. We only use information from those services to support the feature you ask Vantra to perform and to maintain the related connection.

Vantra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect an integration, that provider's own terms and privacy policy also apply to its processing of your information.

6. Sharing and disclosures

We may disclose information in the following circumstances:

• To other users in your workspace when content, assignments, mentions, or approvals are shared with them.
• To vendors and infrastructure providers that help us operate Vantra.
• To payment processors and integration providers you intentionally connect.
• To professional advisers, auditors, insurers, or acquirers in connection with legitimate business needs.
• To comply with law, legal process, or enforceable governmental requests.
• To protect the rights, security, and safety of Vantra, our users, or others.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

7. Retention

We retain information for as long as needed to provide the service, maintain security and audit records, comply with legal obligations, resolve disputes, and enforce our agreements. The exact retention period depends on the type of data, the workspace configuration, and whether an account or integration remains active.

8. Security

We use administrative, technical, and organizational measures designed to protect information. Examples include authentication controls, encrypted storage for secrets used in automation or integrations, and access restrictions inside the product. No service can guarantee absolute security, and you are responsible for keeping your credentials secure and limiting access to authorized teammates.

9. International transfers

Vantra and our service providers may process information in countries other than your own. Where required, we use appropriate safeguards for international data transfers.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain uses of your personal information, or to withdraw consent where processing relies on consent.

California residents may have rights under California privacy laws, including the right to know, correct, and delete certain personal information. If Vantra ever engages in a practice that requires an opt-out right under applicable law, we will provide the required notice and method to exercise that right.

To exercise a privacy request, contact abderraoufhalila@gmail.com. We may need to verify your request before acting on it.

11. Children

Vantra is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the date above and may provide additional notice inside the product or by email where appropriate.

13. Contact

If you have questions about this Privacy Policy or how Vantra handles personal information, contact abderraoufhalila@gmail.com.