Privacy Policy

Vectego ("we," "our," or "us") operates the Vectego platform accessible at https://vectego.com and related web applications (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.

We do not sell student personal information, and we do not share it for cross-context behavioral advertising.

The Service is offered to residents of the United States, and data is processed in the United States. We do not market the Service to, or design it for, users outside the United States.

We collect the following categories of personal information:

We use the information we collect for the following purposes:

• Service delivery: to create and manage your account, provide platform features, process subscriptions, send transactional communications, and respond to support requests.
• Personalization: to generate opportunity recommendations, assist with drafts, and tailor content to your academic interests and goals.
• Product analytics and improvement: to analyze usage patterns, measure feature performance, identify bugs, and make decisions about product development. Our analytics tooling (Vercel Analytics) is first-party and cookieless.
• Marketing communications: to send you product updates and information about new features, where permitted by law. Every marketing email includes an unsubscribe link, and you may opt out at any time.
• Age screening: we use your date of birth at signup to confirm you are at least 13 years old.
• Legal and safety: to comply with applicable laws and regulations, enforce our Terms of Service, prevent fraud, and protect the rights, property, or safety of Vectego, our users, or the public.
• Corporate transactions: in connection with a merger, acquisition, financing, sale of assets, or similar transaction, your information may be transferred as part of that transaction.

Certain features of the Service are powered by artificial intelligence, specifically Google Gemini. When you use AI features, the chat and document content you submit (such as profile information, essay drafts, and chat messages) is processed by Google's API under our agreement with Google.

AI-generated content may be inaccurate. It is provided for informational purposes only and is not professional, counseling, legal, or other regulated advice. You are responsible for reviewing AI output before relying on it.

We do not sell student personal information, and we do not share it for cross-context behavioral advertising. We share personal information only with the service providers (subprocessors) below, who process it on our behalf to run the Service:

• Google Gemini: AI processing of user-provided profile, essay, and chat content submitted to AI features.
• Supabase: database and authentication hosting; receives the account, academic, and user-generated data stored in the Service.
• Vercel: hosting; receives request data needed to serve the application. Vercel Analytics is first-party and cookieless.
• Resend: email delivery; receives your email address and the content of emails we send you.
• Stripe: payment processing; receives billing details and payment card information for paid plans.

We may also disclose information in these limited circumstances:

• Legal requirements: if required to do so by law, subpoena, court order, or regulatory authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure safety.
• Business transfers: in the event of a merger, acquisition, restructuring, or sale, your information may be transferred to a successor entity, subject to the same privacy protections.
• With your consent: in any other circumstances, we will share your information only with your explicit consent.

Google API data: information obtained through Google APIs, including Gmail data, is not shared with third parties for advertising purposes and is not used to develop, improve, or train generalized AI/ML models. It is used exclusively to provide the features you explicitly request.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account or submit a verified deletion request, we delete your personal information, except where we are required to retain it by law (e.g., financial records, legal disputes).

We use technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction, including:

• Encryption of data in transit using TLS.
• Encryption of data at rest through our hosting providers.
• Row-level security (RLS) policies in our database to enforce per-user data isolation.
• OAuth 2.0 token management with short-lived access tokens and secure refresh token storage.
• Access controls and principle of least privilege for internal systems.

No method of transmission or storage is 100% secure. In the event of a data breach affecting your rights, we will notify you and applicable regulators as required by law.

We use the following types of cookies and similar technologies:

• Strictly necessary cookies: session and authentication cookies required for the Service to function. These cannot be disabled.
• Preference cookies: used to remember your settings and preferences (e.g., dismissed banners).
• Analytics: we use Vercel Analytics, which is first-party and cookieless.

We use no third-party advertising trackers. We do not respond to Do Not Track (DNT) browser signals; because we use no third-party advertising trackers, there is no cross-site tracking for such signals to disable.

You can control non-essential cookies through your browser settings. Disabling certain cookies may impair some Service functionality.

The Service is intended for users who are 13 years of age or older. We present a neutral age screen at signup and use your date of birth for age screening. We do not knowingly collect personal information from children under 13, and if we discover that we have collected personal information from a child under 13, we delete it. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at privacy@vectego.com.

Users between 13 and 17 years of age should use Vectego with a parent or guardian's permission.

Depending on your state of residence, you may have rights under applicable U.S. state privacy laws with respect to your personal information:

• Access / Know: request a copy of the personal information we hold about you, including the categories, sources, and purposes for which it is used.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of your personal information, subject to legal retention obligations and other exceptions permitted by law.
• No sale / no sharing: we do not sell personal information and do not share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of.
• Marketing opt-out: you may unsubscribe from marketing emails at any time via the unsubscribe link in any marketing email or by emailing privacy@vectego.com. This does not affect transactional communications.
• Gmail disconnection: you may disconnect your Gmail account at any time from your account settings, upon which we delete your stored OAuth tokens.

Manage your preferences directly: visit our Privacy Choices page to manage marketing emails and submit access or deletion requests.

To exercise any of these rights, contact us at privacy@vectego.com. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any privacy rights.

Vectego's use of information received from Google APIs, including the Gmail API, adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Gmail data only to provide or improve the email campaign features explicitly requested by the user.
• We do not use Gmail data to serve advertisements.
• We do not allow humans to read your Gmail data except with your affirmative consent, for security purposes, or to comply with applicable law.
• We do not transfer Gmail data to third parties except as necessary to provide or improve the requested features, subject to the requirements of the Google API Services User Data Policy.

Vectego is not a school and is not a party to contracts with educational agencies or institutions that would make it subject to the Family Educational Rights and Privacy Act (FERPA) as a covered entity. Students and counselors provide information to the Service directly.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date and, where required by law, by sending you an email notification. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: