Vezra is a product of Fintava Technology Limited ("we", "us", or "our"), the data controller for the personal information this policy describes. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at vezra.io and associated mobile applications (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.
1. Information We Collect
1.1 Information you provide directly
- Account registration details (name, email address, password)
- Workspace and organisation information
- Payment information (processed securely by our payment provider — we do not store card details)
- Communications you send to us (support requests, feedback)
1.2 Information collected automatically
- Log data (IP address, browser type, pages visited, timestamps)
- Device information (device type, operating system)
- Usage data (features used, agent interactions, integration activity)
- Cookies and similar tracking technologies
1.3 Information from third-party integrations
When you connect a third-party service (e.g. Gmail, Outlook, Slack, QuickBooks, Xero), we receive access tokens and, where necessary to identify your account, limited profile information (such as your email address or account name) from that service. We access your third-party data only as directed by you through your use of the Service.
2. How We Use Your Information
- To provide, operate, and maintain the Service
- To process transactions and manage your account
- To personalise your experience and improve the Service
- To execute AI agent actions on connected third-party services on your behalf
- To send you service-related communications (account updates, security alerts)
- To respond to your support requests and feedback
- To detect, prevent, and address fraud, abuse, and security issues
- To comply with legal obligations
3. AI and Your Data
Vezra uses large language models (LLMs) to power its AI agents. When you interact with an agent:
- Your messages and relevant context are sent to AI model providers to generate responses
- We do not use your personal data or third-party integration data to train AI models
- AI model providers may have their own data handling practices — we use providers with enterprise data protection agreements
- Conversation history is stored to provide continuity across sessions and may be deleted from your account settings
4. How We Share Your Information
We do not sell your personal information. We may share it with:
- Service providers: Third-party vendors who assist in operating the Service (hosting, payment processing, analytics) under confidentiality obligations
- AI model providers: To process your requests, under data processing agreements
- Third-party integrations: Data is sent to connected services only as directed by your agent actions
- Legal requirements: Where required by law, court order, or to protect our rights and safety
- Business transfers: In connection with a merger, acquisition, or sale of assets, with notice to you
4.1 Who receives your information
These are the companies that receive your information, and what each one gets. We ask everyone to agree to this, once, in the app.
AI models
- Anthropic: your messages, files and what your agents read and remember, when an agent runs on Claude, either on your own Claude plan or on ours.
- OpenAI: the same, when an agent runs on your own ChatGPT plan or on Vezra's own AI, Luna; and files, photos and voice notes, so they can be read.
- OpenRouter: the same, if Vezra's own AI falls back to another model when its first choice isn't answering.
Voice and calls
- ElevenLabs: your voice, and the words of your agents' replies, for voice notes and calls.
- Vapi and Deepgram: what is said on phone calls, on workspaces that use phone calls.
- Twilio: phone numbers, and the calls and text messages through them, on workspaces that use phone numbers.
- Expo and Apple: the words of a notification, to deliver it to your phone.
Search and maps
- Serper: what your agents search the web for, and the places they look up.
- OpenStreetMap (Nominatim): locations and addresses your agents or your phone look up. Data © OpenStreetMap contributors.
- OSRM: the start and end points of driving routes.
- wttr.in: the place your agents check the weather for.
Running the Service
- Fly.io: hosting: your workspace's computer, its files, and our databases.
- Amazon Web Services: files you upload, for storage.
- Postmark: your email address and the emails we send you. If you report a message, the report goes to our support team through it.
- Inngest: internal job names and workspace identifiers, to run scheduled work.
- Sentry: technical error reports, which can include your account identifiers.
- Langfuse: a record of requests to our AI models, including their content, if we turn this on to find faults.
- Crisp: your name, email address and workspace details, and what you write, if you use the support chat on our website.
Payments and signing in
- Stripe: your name, email address and card details, if you pay by card. We never see your card number.
- Apple: your purchase, if you pay through the App Store, and your sign-in, if you use Sign in with Apple.
- Google: your name and email address, if you sign in with Google.
Analytics and advertising
- PostHog (hosted in the EU): how the Service is used: which screens and features, your account identifier, name and email address, your device and app version. It also receives account and billing events from our servers.
- Reddit: when you sign up on our website: scrambled (hashed) copies of your email address and account identifier, your IP address and browser details, so we can tell which adverts work; and the pages you visit on our website, if you accept marketing cookies there. Nothing is sent to Reddit when you sign up in our iPhone app.
When an agent runs on your own Claude or ChatGPT plan, that company's own terms and privacy settings apply to it, including whether it may use your content to improve its models.
When you connect another service (for example Gmail, Slack or QuickBooks), or add your own key for one (for example fal, for pictures and video), your agents send it what they need when you ask them to. That service's own terms and privacy policy apply. When your agents browse the web for you, the sites they visit receive what any visitor's browser sends, and anything you ask your agents to enter there.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time. Some data may be retained for a limited period after deletion where required by law or legitimate business purposes (e.g. billing records). If your workspace has no active subscription, we power it down, and we delete it and its data 3 months after your paid time ended, or 3 months after sign-up if you never paid. We email you a week before. A free trial that ends without a subscription is deleted 14 days after it ends, with an email 3 days before.
6. Cookies and Analytics
We use cookies and similar technologies to authenticate your session, remember your preferences, and — with your consent — understand how the Service is used so we can improve it. Product analytics and session replay are provided by PostHog, hosted in the EU. Input fields and elements tagged as private are masked in session replays.
When you first visit Vezra, we ask for your consent via a banner with equally prominent "Accept all" and "Reject all" options. You can change your choice at any time in Settings → Privacy & Data. For a full list of cookies, see our Cookie Policy.
7. Security
We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. OAuth tokens for connected services are stored encrypted. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time where processing is based on consent
The fastest way to exercise your rights is from within the app: go to Settings → Privacy & Data, where you can download a complete export of your data, update your consent preferences, or permanently delete your account. You can also contact us at privacy@vezra.io, and we will respond within 30 days as required by the UK GDPR.
If you are in the UK or EEA and you believe we have mishandled your data, you have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner's Office (ICO — ico.org.uk).
9. Children's Privacy
The Service is not directed at children under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.
10. International Transfers
Your data may be processed in countries other than your own, including the United Kingdom, the European Union, and the United States. Where we transfer data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
11. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Service, and update the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team at privacy@vezra.io.