Introduction
This Privacy Policy (the “Policy”) describes how VC Tools Inc (“VC,” “we,” or “us”) collects, uses and shares personal information when you use the VC desktop and mobile applications, the hosted VC web application at https://app.vce.codes, the account portal at https://portal.vce.codes, or the optional VC Connect service (together, the “Services”), or visit the VC website at https://vce.codes (the “Site”). It applies to personal information we collect through the Site and the Services and to personal information you give us directly.
By using the Site or the Services, you acknowledge the practices described in this Policy. If you do not agree with it, please do not use the Site or the Services.
This Policy does not govern third-party coding agents, artificial-intelligence providers, identity providers, or environments that you choose to connect to VC. Those parties process information under their own terms and privacy policies.
Personal information we collect
We collect personal information in different ways depending on how you use VC and which optional features you enable.
When you use VC
- Account information. If you create or sign in to a VC account, we receive your name, email address, profile details, user ID, sign-in method, and authentication credentials or tokens, either from you or from the identity provider you select.
- Sign-in and session information. To protect your account, we record sign-in events, one-time code requests, and session details such as the IP address and time of sign-in and of last activity.
- Plan and payment information. If you buy a plan, we keep your plan, subscription status, payment and refund records, and invoices. Payments are processed by our payment provider; we do not receive your full card or bank account number.
- Environment and device information. If you use VC Connect or list servers with your account, we process what is needed to connect and secure your environments and devices, such as identifiers, labels you assign, public keys, connection endpoints, credential hashes, connection status, app and operating-system versions, and notification preferences.
- Agent activity and notifications. If you enable notifications or Live Activities, we process push tokens and the limited activity information needed to show them, such as project and thread titles, model name, status and headline.
- Information you give us. We collect what you choose to send us in support tickets, emails, feedback or other communications.
When you visit the Site
When you visit the Site or use online parts of the Services, we and our service providers may automatically log your IP address, approximate country, device and operating-system type, browser or app version, pages viewed, access times, connection events, errors and diagnostic traces. We use this information to provide, secure, maintain and troubleshoot the Site and the Services and to suggest a language, not for targeted advertising.
Information we get from others
We may receive personal information from service providers that help us operate the Services, such as identity and payment providers, and from coding-agent providers you choose to use. We may combine it with information we collect through the Site and the Services.
Cookies and local storage
The Site and the Services use cookies and similar technologies to keep you signed in, remember preferences such as your language and theme, and check that the Services work. VC also stores connection settings, credentials, preferences, drafts, and cached thread, file, branch and server metadata on your device. Credentials and session tokens use the platform’s protected storage where available. Information stored only on your device is not collected by VC unless it is sent as part of a feature you use.
Device permissions
- Camera. Used when you scan a pairing QR code. Frames are processed on your device.
- Photos and files. Items you select are accessed only to preview them or attach them to a request you start.
- Microphone. Used only while you speak to Master Agent in Voice mode, through your browser’s speech services.
- Notifications. Used only if you enable agent-status notifications or Live Activities.
- Local network. Used to discover or connect to VC environments reachable from your device.
How we use your personal information
We use personal information to:
- Create and authenticate your account and protect it from unauthorized access;
- Link and protect devices and environments, and deliver optional notifications;
- Process purchases, manage subscriptions, issue invoices and handle refunds;
- Provide the features you request and respond to support requests and feedback;
- Communicate with you about the Services, your plan and your account and, where permitted, send product news you can unsubscribe from at any time;
- Monitor reliability, prevent abuse and investigate security incidents;
- Comply with law and enforce the terms that govern the Services; and
- Analyze and improve VC using aggregated, de-identified or otherwise anonymous operational information.
Training of AI models
We do not use your personal information, source code, prompts or agent responses to train artificial-intelligence models.
Compliance and protection
We may also use personal information to comply with laws, lawful requests and legal process; to protect the rights, privacy, safety and property of VC, our users and others; to audit our compliance with legal and contractual requirements; to enforce our terms; and to prevent, investigate and deter fraud, abuse, security incidents and other unlawful activity.
How we share your personal information
Providers you choose
At your direction, prompts, files and related content are sent to the coding agents and artificial-intelligence providers configured in your environment. Because you bring and configure your own providers, the third parties involved vary. They process information under their own terms and privacy policies.
Service providers
We use service providers to run the Services and our business. Depending on the features you use, they include:
- Payment processing. PayPal processes purchases and refunds of paid plans.
- Authentication. When sign-in through Clerk is enabled, Clerk provides account authentication.
- Hosting and networking. Providers that host the Site, the account portal and VC Connect and carry their traffic.
- Email delivery. Providers that send sign-in codes, receipts and support replies.
- App distribution. If you install VC from the App Store or Google Play, Apple or Google distribute the app and may deliver platform notifications.
These providers process information for us under contractual and privacy obligations, and under their own privacy policies where they act independently.
Affiliates and professional advisors
We may share personal information with our affiliates for purposes consistent with this Policy, and with lawyers, accountants, auditors and other professional advisors in the course of the services they provide to us.
Corporate restructuring
We may share personal information in connection with, or during negotiation of, a merger, financing, acquisition, reorganization, bankruptcy, dissolution, sale of assets or similar transaction. If another company acquires VC or its assets, that company may take over the personal information we hold and the rights and obligations described in this Policy.
Legal and safety disclosures
We may disclose personal information if we believe in good faith that it is necessary to comply with law or legal process; to protect the rights, property or safety of VC, our users or others; to investigate or prevent fraud, abuse or unlawful activity; or to enforce this Policy and our terms. We may also share personal information at your direction or with your consent.
No sale of personal information
We do not sell your personal information or share it for cross-context behavioral or targeted advertising.
Third-party websites and services
The Site and the Services may link to third-party websites or services. When you follow such a link or connect a third-party service, that third party may collect personal information from you. We do not control, and are not responsible for, the privacy practices or content of third parties.
Your choices
Account and connection choices
You can use local or direct connections without a VC account. You can disconnect environments, sign out, review and end sessions in the account portal, turn off optional notifications, unsubscribe from product emails, and clear local caches from Settings. You can grant or revoke camera, photo, microphone, local-network and notification permissions in your device settings.
Cookies and local data
You can block or delete cookies in your browser settings, although parts of the Site or the Services may then stop working. Information stored only on your device stays there until you clear it, remove the relevant connection, or uninstall the app.
Retention and deletion
We keep account, plan, payment, environment-link, device, notification and security information while your account or the relevant feature is active, and afterwards for as long as reasonably necessary to provide the Services, protect them from abuse, meet tax, accounting and other legal obligations, and resolve disputes. Some records may remain longer in backups or where the law requires it.
To ask us to delete your VC account, email [email protected] from the address on your account. We may need to verify your identity. Deleting a VC account does not delete information held by an environment or coding-agent provider you control; contact those providers or delete that information directly.
Your privacy rights
Depending on where you live, you may have the right to ask for access to, correction of, deletion of, or a portable copy of your personal information, or to restrict or object to certain processing. You may also have the right to appeal our response or to complain to a data-protection authority. We will honor applicable rights after verifying your request.
Security of your personal information
We use administrative, technical and organizational safeguards designed to protect personal information from unauthorized access, use or disclosure. They include encrypted network transport, scoped access tokens, single-use pairing and sign-in codes, protected credential storage, and keeping secrets out of logs where we can.
No method of transmission over the Internet or of electronic storage is completely secure, so we cannot guarantee absolute security. You are responsible for securing the environments, coding-agent accounts, credentials and networks you connect to VC.
International users
We and our service providers may process personal information in countries other than the one where you live, which may have different data-protection rules. Where required, we use lawful safeguards for these transfers.
Children
The Site and the Services are not intended for children under 13, and you must be at least 13 years old to use them. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, please contact us so we can take appropriate action.
Do Not Track
We do not currently respond to browser “Do Not Track” signals. VC does not use personal information for cross-context behavioral or targeted advertising.
Updates to this Privacy Policy
We may update this Policy from time to time. If we make material changes, we will post the revised Policy at this address, update the dates above, and give any additional notice the law requires. Unless stated otherwise, changes take effect when the revised Policy is posted.
Contact us
If you have questions about this Policy or want to make a privacy or deletion request, contact VC Tools Inc at [email protected].