Privacy Policy
Important legal information governing your use of our services.
Table of Contents
Introduction & Overview
At Vekor AI (also operating as Vekor Automation, accessible at https://vekorai.com), we believe that data privacy and security are fundamental to delivering intelligent business automation. We provide AI communication infrastructure, appointment scheduling, and CRM automation workflows for modern businesses and real estate brokerages.
This Privacy Policy describes how Vekor AI collects, uses, stores, and protects information when you access our website, use our software platforms, or authorize integrations with third-party platforms (including Google API services).
Information We Collect
To provide reliable business automation services, we collect and process the following categories of information:
Account & Business Information
Name, business email address, phone number, company/brokerage name, and configuration parameters needed to establish your automated systems.
Lead & Communication Data (Data Processor)
Contact records, lead inquiries, conversation transcripts, and booking requests processed on your behalf through automated channels. Vekor AI acts strictly as a data processor for this information.
Integration & Authentication Credentials
Encrypted OAuth tokens, webhook keys, and API credentials provided when you explicitly connect external business tools (e.g., Google Calendar, Google Sheets, CRMs).
Technical & System Metadata
IP addresses, browser type, interaction logs, task execution timestamps, and error diagnostic logs required to maintain platform reliability.
Google User Data & Integrations
Vekor AI allows users to optionally connect their Google Account via official OAuth 2.0 authorization to streamline scheduling and data synchronization. When you grant permission, Vekor AI may access the following Google services strictly to fulfill user-requested features:
Google Calendar
- Data Accessed: Free/busy availability status, calendar event titles, dates, and times.
- Purpose & Usage: To prevent double-booking, check real-time agent availability, and automatically schedule, update, or cancel confirmed appointments and property tours as instructed by the user.
Google Sheets
- Data Accessed: Specific spreadsheet rows, columns, and sheet tabs explicitly designated by the user.
- Purpose & Usage: To log newly captured leads, record conversation outcomes, and read authorized spreadsheet records for CRM synchronization workflows.
How We Protect & Store Google Data
All Google OAuth tokens are encrypted at rest using industry-standard AES-256 encryption and transmitted over secure TLS 1.3 connections. Vekor AI only stores the minimum necessary tokens required to perform user-authorized actions. We do not store full copies of your Google Calendar or Google Drive files on our servers.
Google Limited Use Disclosure
Vekor AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In accordance with the Google Limited Use requirements:
- We do not transfer Google user data to third parties, except as strictly necessary to provide or improve user-facing features, comply with applicable laws, or as part of a merger/acquisition.
- We do not use or transfer Google user data for serving advertisements, including personalized, retargeted, or interest-based advertising.
- We do not allow human personnel to read Google user data unless we have obtained your explicit affirmative consent, it is required for security or legal compliance, or the data is aggregated and anonymized for internal operations.
The Zero Training Guarantee
We distinguish ourselves by our strict commitment to your data sovereignty. Vekor AI does not use your proprietary business data, Google user data, lead conversations, or confidential operational workflows to train, fine-tune, or improve any public or foundation AI models. Your data remains strictly isolated within your private environment.
Data Sharing & Partners
We process your information strictly to fulfill our services. We never sell, rent, or monetize your personal data. We only share information with:
Sub-processors & Cloud Infrastructure
Trusted infrastructure providers (e.g., AWS, Supabase, Vercel, Twilio) that host our services under strict data protection agreements.
Legal & Regulatory Compliance
If required by law, subpoena, or valid regulatory process, we may disclose information to the extent strictly necessary.
Data Security & Storage
We employ enterprise-grade administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or alteration.
- Encryption in Transit: All web traffic and API calls use TLS 1.2/1.3 encryption with modern cipher suites.
- Encryption at Rest: Database records and integration secrets are encrypted using AES-256.
- Access Control: Access to infrastructure is restricted according to the principle of Least Privilege with multi-factor authentication (MFA).
Data Deletion, Rights & Revocation
You maintain full control over your data and connected integrations at all times:
Revoking Google OAuth Access
You can disconnect Vekor AI from your Google Account at any time directly through Google's security portal:
Manage Google Third-Party AccessRequesting Account & Data Deletion
To request permanent deletion of your account data, stored tokens, conversation logs, or personal information, please submit a written request to our compliance team. We process all deletion requests within 30 calendar days.
Request Data DeletionContact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our compliance with data protection laws, please contact our team:
Privacy & Compliance Team