Privacy Policy

1. Information We Collect

a. Account Information

Name, email, company, job title, credentials, and authentication data (MFA, password resets).

b. Usage Data

• Log data (IP address, browser, device, OS, timestamps, pages viewed).
• Actions within Vantage including workflow creation, feature usage, and clickstream data.

c. Workflow and Content Data

Data you input, upload, or process — files, templates, workflow configurations, attachments, metadata, AI-generated outputs, and automation logs.

d. Payment Information

Payment details processed via PCI-compliant providers. Billing addresses, transaction history, and subscriptions.

e. Third-Party Integration Data

When you connect external services (Google, Microsoft, databases, APIs, etc.), we access data based on the permissions you grant during authorization. This may include:

• Calendar events and availability
• Files and documents you select
• Email sending capabilities
• Database schemas, queries, and results
• Account profile information (name, email)

We only access what is necessary to perform the integration you configured.

f. Cookies and Tracking

Session and persistent cookies, web beacons, pixels, and analytics scripts. Manage preferences through your browser settings.

g. Support and Communications

Support requests, chat logs, emails, and call recordings (where permitted).

2. How We Use Your Information

• Service delivery: Account management, authentication, workflow execution, and support.
• Personalization: Recommending templates, features, and content.
• Improvement: Usage analysis, troubleshooting, debugging, and feature development.
• Communication: Service notifications, updates, and marketing (with opt-out).
• Security: Fraud detection, abuse prevention, and policy enforcement.
• Analytics: Aggregated and anonymized data for benchmarking and research.

3. AI and Automated Processing

Vantage uses embedded AI (including "Winston") for workflow assistance, automation, and recommendations. Your data may be processed by AI features only when explicitly configured in a workflow. You may request human review of significant automated decisions as required by law.

4. How We Share or Disclose Data

• Service providers: Cloud hosting, payment processors, analytics, and support vendors under data protection agreements.
• Third-party integrations: When you connect external services, data flows as needed for the integration. Review their privacy policies.
• Business transfers: In mergers, acquisitions, or asset sales, with notice.
• Legal requirements: To comply with law, regulation, or legal process.
• With your consent: For other purposes with explicit consent.

We do not sell your personal data.

5. Third-Party Integration Data Practices

General

All third-party OAuth tokens are encrypted at rest using AES-256-GCM. Access tokens are refreshed automatically; raw credentials are never stored in plaintext. You can disconnect any integration at any time from Settings → Integrations, which immediately deletes stored tokens.

Google API Services

Vantage's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google data is not sold, shared for advertising, or used for market research.
• Google data is not used to train general-purpose AI models.
• Google data processed in workflows is retained only for the duration of execution unless you configure persistent storage.

You may also revoke access from your Google Account permissions.

Microsoft Services

Similar protections apply to Microsoft integrations (OneDrive, Outlook, Teams). OAuth tokens are encrypted and deletable via Settings.

6. International Data Transfers

Your information may be transferred to countries outside your own, including the United States. We use Standard Contractual Clauses and appropriate safeguards to protect your data.

7. Data Retention

We retain data only as long as necessary for the purposes in this policy, legal obligations, dispute resolution, and agreement enforcement. Upon account deletion, data is deleted or de-identified except where legally required.

8. Security

• AES-256-GCM encryption at rest for credentials and sensitive data
• Encryption in transit (HTTPS/TLS)
• Access controls and authentication
• Regular security audits and monitoring

No system is completely secure. Report suspected incidents to support@intuidy.com.

9. Your Privacy Rights

Depending on your location, you may:

• Access a copy of your personal data
• Correct inaccurate data
• Delete your data
• Restrict or object to processing
• Port your data in a standard format
• Opt out of marketing
• Withdraw consent at any time

Contact support@intuidy.com to exercise your rights.

10. California Privacy Rights (CCPA/CPRA)

California residents have additional rights: right to know, delete, opt out of data sales (we do not sell data), and non-discrimination. Contact support@intuidy.com.

11. Children's Privacy

Vantage is not intended for children under 16. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy and will notify you of material changes via email or platform notification. Continued use constitutes acceptance.

13. Contact Us

Intuidy Technologies, Inc.
10000 Marshall Dr, Lenexa, KS 66215
Email: support@intuidy.com
Website: intuidy.com