Privacy Policy

We respect your privacy and are committed to protecting it. This policy explains what data we collect, how we use it, and the choices you have.

Information We Collect

Account details, usage data, and training interactions you choose to perform within Vylo. We do not sell your personal information.

How We Use Data

To operate the service, improve training experiences, and provide support. Limited operational analytics may be used to enhance reliability.

Google User Data

If you connect Google Calendar, Vylo requests read-only access to your calendar list, future event details, saved contacts, and Other Contacts. Event details can include titles, descriptions, times, locations, organizers, attendees, response status, meeting links, and Google event links.

Vylo requests events from the current time through one year ahead. Your primary calendar starts enabled. You can enable or disable other eligible calendars from your Profile.

Vylo uses saved contacts and Other Contacts only to find names for attendee email addresses. Vylo uses calendar data to create, update, and remove interaction records that help you prepare for upcoming conversations.

Google Data Storage and Security

Vylo stores encrypted Google OAuth credentials, selected calendar settings, synchronized event source data, short-lived contact lookup results, and derived interaction records.

Vylo protects Google data through authenticated, account-scoped access controls. Vylo uses HTTPS for requests to Google APIs and encrypts Google access and refresh tokens with AES-256-GCM before database storage. Token encryption keys reside in server-side configuration. Google Calendar and Contacts permissions are read-only.

Google Data Sharing and AI Processing

Vylo transfers Google user data only to service providers that process it on Vylo's behalf. Convex hosts the application data. Anthropic processes relevant event details, attendee information, and relevant Vylo person context to create interaction summaries and preparation records.

Vylo does not sell Google user data. Vylo does not use or permit Google user data to train general-purpose artificial intelligence or machine learning models. Vylo does not use Google user data for advertising or unrelated profiling.

Google Data Retention and Deletion

Vylo keeps synchronized Google data while the connection remains active and for as long as needed to provide the Calendar feature. When you disconnect, Vylo removes the Google credentials, calendar settings, event source data, synchronization state, local notification channel records, and contact lookup cache for that connection. Vylo also attempts to stop the notification channels at Google.

During disconnection, you choose whether Calendar-created interactions remain in Vylo or are removed. You can make the same choice when you disable one calendar. You can also request account deletion by contacting support@vylo.is.

Google Access Controls

You can disable a calendar or disconnect Google Calendar from your Vylo Profile. You can also revoke Vylo's access from your Google Account permissions. Revocation stops future access but does not select whether existing Vylo interactions remain. Use the Vylo disconnect control for that choice.

Google Limited Use

Vylo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your Choices

You may request deletion of your account and associated data at any time by contacting support@vylo.is.

Contact

For privacy inquiries, contact support@vylo.is.