TL;DR
- ✓We don't sell your data. Ever.
- ✓We don't train AI on your content without explicit consent.
- ✓You own everything you upload.
- ✓You can request full deletion at any time.
- ✓We only collect what's necessary to run the service.
Our Data Philosophy
VectorPM is built on a simple premise: your product strategy is your competitive advantage, and we treat it that way. We collect only what we need to deliver the Service. We do not sell your data. We do not use your uploaded context to train general-purpose AI models. Full stop.
Information We Collect
Account Information: When you sign up, we collect your email address and, optionally, your name and company. This is used for authentication, billing communication, and product updates.
Usage Data: We collect anonymized analytics about how you use the Service (e.g., features visited, actions taken) to improve the product. We use privacy-respecting analytics and do not track cross-site behavior.
Your Content: Documents, text, and files you upload to the Reservoir, PRDs you create in the Shared Forge, and audit data in the Vector Pulse. This data is processed to provide the Service and is not shared with third parties except as described in this policy.
Payment Information: Billing is handled by Stripe. VectorPM does not store your payment card details. Stripe's privacy policy governs how your payment data is handled.
How We Use Your Information
We use the information we collect to: provide, maintain, and improve the Service; communicate with you about your account, billing, or product updates (you can opt out of non-essential communications at any time); detect and prevent fraud or abuse; and comply with legal obligations.
We do not use your uploaded content to train, fine-tune, or evaluate general AI models beyond what is necessary to process and return results to you within the Service.
Data Sharing
We share your data only with: (1) service providers necessary to operate the Service, such as our cloud infrastructure provider and Stripe for payments — these providers are contractually required to protect your data; (2) law enforcement or regulatory authorities where legally required; and (3) successors in the event of a merger or acquisition, subject to the same privacy protections as this policy.
We do not sell, rent, or broker your personal data to third parties.
AI and Your Content
The Reservoir, Shared Forge, and Vector Pulse use AI to process your uploaded content. This processing occurs within your account context — we maintain strict isolation between customer accounts.
Your Content is used only to: index and retrieve context relevant to your queries; provide AI-generated suggestions, guardrails, and audits within the Service; and improve the quality of AI responses within your specific product context.
We will always ask for explicit consent before using Your Content for any purpose beyond delivering the Service to you.
Data Retention
Account data is retained for the duration of your active subscription plus 90 days after cancellation, during which you may export your data. After 90 days, your data is permanently deleted from our systems.
You can request deletion of your data at any time by emailing hello@vectorpm.ai. We will complete deletion within 30 days and confirm when done.
Security
We use industry-standard security practices including: encryption at rest (AES-256) and in transit (TLS 1.3); strict access controls and audit logging; regular security reviews; and customer data isolation at the infrastructure level.
No system is perfectly secure. In the event of a data breach that affects your personal data, we will notify you as required by applicable law and take immediate steps to mitigate harm.
Your Rights
Depending on your location, you may have the right to: access the personal data we hold about you; correct inaccurate personal data; request deletion of your personal data; object to processing for direct marketing; and export your data in a portable format.
To exercise any of these rights, email hello@vectorpm.ai. We respond to all privacy requests within 30 days.
Changes to This Policy
We will notify you of material changes to this policy via email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
Contact
Privacy questions? Email us at hello@vectorpm.ai. We take privacy seriously and will respond within 5 business days.