Privacy Policy

Last updated: October 4, 2026

This Privacy Policy describes how VectorForsight handles information you provide when you use the application. It reflects the current, verified behavior of the product and the retention policy adopted for VectorForsight.

1. Information you provide

To use VectorForsight, you may provide:

Account information — your email address and password, managed by the platform's authentication system.
Organization and business information — business name, website, industry, segment, size, country, and description.
Project information — project name, type, lifecycle stage, and website URL.
Business context — a description of how the business works, including customers, offerings, current tools, pain points, goals, and constraints.
Consent records — your consent to analyze your business data for this project.
Decisions — your review decisions and notes on identified opportunities.
Product activity records — authenticated audit and intent events for meaningful product actions, such as creating a project or requesting an analysis.

Additional capabilities — action plans, outcome measurements, and feedback — exist in the product but are not generally available today. When those become available, the information you enter for them will be covered by this policy.

2. Why your information is used

Your information is used to:

operate the service and create and manage your projects;
generate Opportunity Maps from your business context;
produce AI-assisted observations, inferences, and recommendations;
maintain audit and intent records for accountability;
derive bounded product-usage measurements from those existing records, such as whether an eligible account performed an audited product action in a defined account-age window; and
support the product features you use.

3. AI processing

VectorForsight uses artificial intelligence to analyze the business context you provide. AI output can include observations, inferences, recommendations, assumptions, risks, and uncertainties.

AI-generated output may be incomplete or incorrect. An AI recommendation is not a verified fact merely because the AI produced it. Human review remains required for any business decision.

To generate your analysis, your business context is processed by VectorForsight and its AI service providers. This means your information is handled by those providers as necessary to run the analysis.

4. Website information

VectorForsight has a website-evidence capability, but it is not currently enabled for the generally available experience. This policy does not claim that VectorForsight crawls or analyzes your website today. If website-related analysis is introduced, it will be described here.

5. Consent

Before generating an Opportunity Map, you are asked to record your consent to the analysis of your business data for that project. Consent is project-specific and is recorded with the project. A separate self-service consent-history screen is not currently provided.

6. Data provenance and audit

VectorForsight records information about the source and purpose of certain records and maintains audit and intent logs for accountability. Not every record carries full provenance metadata. This is an internal accountability mechanism, not a complete data-lineage guarantee.

VectorForsight currently uses existing authenticated audit records for bounded internal product-usage measurements. It does not add third-party advertising identifiers or tracking cookies for those measurements. An audited action in a D7 or D30 account-age window is treated only as recorded product activity; it is not proof of general browsing activity, user intent, causation, or product-market fit.

7. Selling and commercialization

VectorForsight does not sell your information. Certain records in the system carry a "not eligible for commercialization" marker by default. This means your business context is not treated as a dataset to be monetized or licensed to others.

"Not sold" does not mean your information is never processed by any third party. As described in the AI processing section, AI service providers process your context to generate your analysis.

8. Retention

VectorForsight follows a purpose-based data-minimization policy. We keep identifiable information only for as long as it is reasonably needed to provide the service, maintain the decision and evidence history you asked us to preserve, protect the service, comply with law, or resolve disputes.

Active account and project records — organization, project, business context, analyses, opportunities, decisions, provenance, and enabled lifecycle records are retained while the related account or project remains active, unless you request deletion earlier where applicable.
Website evidence — when website ingestion is enabled, stored snapshots and extracted evidence follow the related project lifecycle and are deleted with the related project/account, subject to the exceptions below.
Audit and security records — retained for up to 24 months from creation unless a longer period is reasonably required for an active security investigation, dispute, abuse prevention, or legal obligation.
Consent and deletion-compliance records — retained for up to 6 years after the relevant consent, revocation, deletion request, or account closure when reasonably needed to demonstrate authorization or compliance.
Deletion requests — because self-service account deletion is not currently available, requests may be sent to the privacy contact below. After VectorForsight verifies a request and determines the records eligible for deletion, those records are targeted for removal from active VectorForsight systems within 30 days, unless a legal, security, fraud-prevention, dispute, or compliance exception applies.
Backups and service-provider copies — residual copies may remain temporarily in protected backups or provider systems and are removed according to applicable backup cycles and provider retention commitments.
De-identified or aggregated information — may be retained longer only when it no longer reasonably identifies you or your business and is maintained in de-identified or aggregate form.

A legal hold or other binding legal requirement may temporarily override ordinary deletion. When an exception ends, information that no longer has a valid retention purpose is deleted or de-identified. VectorForsight does not extend retention merely because information might become commercially useful.

9. Security

VectorForsight uses access controls and application-level safeguards designed to restrict access to authorized users. No system can be guaranteed to be completely secure. We do not represent that the service is impenetrable or error-free.

10. Your choices

You can:

create, edit, and review your projects and business context;
record project-specific analysis consent when creating or preparing a project; and
review and decide on identified opportunities.

Self-service in-application account deletion and downloadable data export are not currently available. VectorForsight has internal, server-side request-review tools that can preview the categories of project data associated with a verified access or deletion request. A preview does not retrieve, package, download, transmit, or automatically delete customer data; fulfillment remains a separate reviewed process.

11. Policy changes

This policy may be updated. The "Last updated" date at the top of this page identifies the current version.

12. Contact

For privacy questions, data requests, or questions about this policy, contact vectorforsight@gmail.com.