Privacy Policy

Last updated: June 2026

1. What We Collect

When you use Vachix, we collect:

2. How We Use Your Data

Your data is used to:

3. Data Storage

All data is stored on Supabase infrastructure hosted in secure data centres. Session transcripts are retained for as long as your account is active and for 90 days after deletion.

4. Data Sharing

We do not sell your personal data. We share it only with:

5. Cookies

We use httpOnly cookies for session authentication. We do not use third-party advertising or tracking cookies.

6. Your Rights

You have the right to:

To exercise any of these rights, email support@vachix.in.

7. Security

Passwords are hashed with bcrypt. All data in transit is encrypted via TLS. Access tokens are short-lived httpOnly cookies. We do not log full request bodies or AI conversation content in production.

8. Children

Vachix is not directed at children under 13. We do not knowingly collect personal data from anyone under 13.

9. Changes to This Policy

We will notify registered users by email of any material changes to this policy at least 14 days before they take effect.

10. Contact

Privacy questions or requests: support@vachix.in