Privacy Policy

Last updated: March 14, 2026

Vesanor ("we", "us", "our") operates the Vesanor platform at vesanor.com, app.vesanor.com, and docs.vesanor.com. This policy describes what data we collect, why, and how we protect it.

1. Data we collect

We collect only what is necessary to provide the service:

• Account information — email address and a hashed password when you sign up. We never store plaintext passwords.
• API usage data — tool-call contracts, run results, and captured LLM responses submitted through our CLI or API. This is the core data you use Vesanor to manage.
• Basic analytics — we use Umami, a privacy-focused, cookie-free analytics tool, to understand page views. No personal data is collected or shared with third parties.

2. How we use your data

• Account emails are used only for transactional purposes: email verification, password resets, and critical service notifications. We do not send marketing or promotional email.
• API usage data is stored per-tenant with strict isolation. Your data is never shared with other tenants or used to train models.

3. Data protection

• All data is encrypted at rest using envelope encryption.
• All connections use TLS (HTTPS only).
• Tenant data is isolated at the database level using row-level security.
• Passwords are hashed using scrypt.
• API keys are stored as SHA-256 hashes — the raw key is shown once at creation and never stored.

For more details, see our security documentation.

4. Data sharing

We do not sell, rent, or share your data with third parties. The only external service that processes your data is Amazon Web Services (AWS), which hosts our email delivery infrastructure.

5. Data retention

Your data is retained for as long as your account is active. If you request account deletion, all associated data — including runs, contracts, API keys, and stored artifacts — is permanently removed.

6. Cookies

Our marketing site does not use cookies. The dashboard application uses two HttpOnly session cookies strictly for authentication. We do not use tracking cookies or third-party advertising cookies.

7. Your rights

You can:

• Access or export your data at any time through the dashboard or API.
• Request deletion of your account and all associated data.
• Update your email or password through the dashboard settings.

8. Contact

For privacy-related questions, contact us at [email protected].

We may update this policy from time to time. Material changes will be communicated via the email address on your account.