Privacy Policy

This Privacy Policy applies to information processed by Vincci in connection with our products and services, including websites, mobile and web applications, support communications, and integrations.

This Privacy Policy does not apply to third party sites, products, or services that are not controlled by Vincci, even when linked or integrated from our platform.

We collect information you provide directly, such as name, business information, email address, phone number, login credentials, payment and billing information, and support messages.

We collect service usage information, including IP address, browser and device signals, operating system, pages viewed, session timing, interactions with features, and diagnostic and log records.

We collect workspace and operational data you submit or generate through the platform, including uploaded files, project records, customer records, scheduling data, messaging records, and workflow history.

We may collect data from integrations you enable, such as payment processors, email providers, calendar providers, telephony providers, and messaging channels.

Google API User Data: If you choose to connect your Google Account to our platform for Google Calendar, we collect and process the Google user data needed to provide that integration. This may include your Google account identifier and email address, OAuth access and refresh tokens, token expiration and scope information, selected calendar IDs and calendar summaries, calendar time-zone settings, sync and watch metadata, and Google Calendar event details such as event title, description, location, status, start and end times, attendees, event IDs, update timestamps, and related payload data.

We receive information from you, your authorized users, your connected integrations, and our service providers that operate infrastructure, analytics, communications, and payment systems.

We may also receive information from public sources and fraud prevention or security services where legally permitted.

We use information to provide and operate the service, authenticate users, process transactions, deliver requested workflows, provide customer support, and maintain account records.

Use of Google API Data: We use data obtained via Google APIs only to provide and improve user-facing Google Calendar integration features that you enable. This includes showing connected calendar availability in Vincci, helping prevent scheduling conflicts, creating, updating, or deleting Google Calendar events on your behalf when you request or approve scheduling actions, syncing selected calendar entries between Vincci and Google Calendar, maintaining the connection, and troubleshooting or securing the integration.

We use information to monitor reliability and performance, prevent abuse and fraud, protect users and systems, and investigate security incidents.

We use information for analytics, product improvement, business operations, compliance, and legal defense. Please note: Data obtained via Google APIs is strictly excluded from these general uses and is utilized solely as described in the "Use of Google API Data" section above.

We may use contact information to send administrative messages, service notices, and product updates. We only send marketing communications where allowed by law, and you may opt out as described below.

In jurisdictions that require a legal basis for processing, Vincci processes personal information based on one or more of the following: performance of a contract, legitimate interests, legal obligations, and consent where applicable.

When consent is the legal basis, you may withdraw consent at any time, subject to legal and operational limitations.

Our services may use machine learning or automated systems to assist with drafting, classification, routing, recommendations, and workflow operations.

Automated output may contain errors and must be reviewed by you before relying on it for legal, financial, operational, or safety critical decisions.

We may evaluate logs and model interactions to improve quality, trust and safety, and abuse prevention, consistent with applicable law and contractual commitments.However, we do not use Google Workspace API data to develop, improve, or train generalized artificial intelligence or machine learning models.

We and our service providers may use cookies, local storage, pixels, and similar technologies to keep users signed in, remember preferences, measure performance, and understand usage patterns.

You may configure your browser or device to limit certain tracking technologies. Some features may not function properly if required technologies are disabled.

We may disclose information to vendors and service providers that process data on our behalf for hosting, infrastructure, analytics, payment processing, support, security, and communications.

We may disclose information to your authorized users and organization administrators based on your account and workspace settings.

We may disclose information when required by law, legal process, regulatory request, or to protect rights, property, safety, and platform integrity.

Except for Google API user data, we may disclose information in connection with a merger, acquisition, financing, due diligence process, reorganization, bankruptcy, or sale of assets. Google API user data will only ever be disclosed or transferred in connection with a final merger, acquisition, or sale of assets as strictly permitted by Google's policies.

Vincci does not sell personal information for monetary consideration.

We may use analytics and advertising tools that could be considered sharing for cross context behavioral advertising under certain privacy laws. Where required, we provide rights to opt out of such processing. As noted above, this does not apply to any data obtained via Google APIs.

Vincci and its service providers may process information in countries other than your own. Data protection laws in those countries may differ from the laws in your jurisdiction.

Where required, we implement transfer safeguards intended to provide an adequate level of protection for transferred personal information.

We retain information for as long as necessary for the purposes described in this Privacy Policy, including to provide services, maintain records, resolve disputes, detect abuse, and comply with legal obligations.

Retention periods vary depending on data type, sensitivity, legal requirements, and operational necessity.

For Google Calendar integrations, we retain Google account connection records, OAuth tokens, selected calendar metadata, and synced calendar event data only for as long as needed to provide the enabled integration or as otherwise described in this Privacy Policy. If you disconnect Google Calendar from the integrations settings, we delete the connection tokens and remove mirrored Google Calendar data from active application records, subject to limited retention in backups, security logs, audit records, or records we must keep for legal, compliance, dispute, or security purposes.

You may request deletion of Google user data by disconnecting the integration in the product or by contacting the Vincci team via your AI Agent.

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. This includes utilizing modern encryption protocols (such as HTTPS) for transmitting data and encrypting tokens or credentials at rest.

No security program can guarantee absolute security. You are responsible for maintaining the confidentiality of your credentials and for using secure access practices.

Depending on your location, you may have rights to access, correct, delete, or obtain a portable copy of certain personal information, and to object to or limit certain processing.

You may also have the right to appeal a denied request and to designate an authorized agent where permitted.

To exercise available rights, contact the Vincci team by asking your AI Agent for support. We may verify your identity before fulfilling a request.

Residents of certain US states may have additional rights, including the right to know categories of personal information collected, sources, purposes of use, categories of recipients, and retention principles.

Subject to applicable law, residents may request access, deletion, correction, data portability, and to opt out of certain sharing or targeted advertising uses.

We do not discriminate against individuals for exercising privacy rights in good faith.

You can unsubscribe from non essential marketing emails by using the unsubscribe link in the message or by contacting us.

Even if you opt out of marketing, we may still send transactional or service related communications needed to operate your account.

Our services are not directed to children under age 13, and we do not knowingly collect personal information from children under age 13.

If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action.

Some browsers transmit Do Not Track signals. Because there is no universally accepted standard for interpreting these signals, our systems may not respond to all such signals.

We may update this Privacy Policy from time to time. If we make material changes, we will update the Last updated date and provide additional notice where required by law.

If we change how we access, use, store, share, or disclose Google user data, we will notify affected users and request consent where required before using Google user data for the new or different purpose.

For privacy questions, request to get in touch via your AI Agent.