Privacy Policy
Last updated: March 2026
Data We Collect
We collect information necessary to provide our AI assistant hosting service, including your email address, payment information (processed securely through Polar.sh), and usage data for billing purposes.
How We Protect Your Data
Your AI agent runs in isolated containers with dedicated resources. We use industry-standard encryption for data in transit and at rest. Your conversations with your AI agent are private and never shared.
Data Retention
We retain your data only as long as necessary to provide our services. You may request deletion of your account and associated data at any time through your dashboard or by contacting support.
Third-Party Services
We use the following third-party services to operate VAOS:
- Supabase — Authentication and database hosting
- Polar.sh — Payment processing and subscription management
- Resend — Transactional email delivery
- Fly.io — Agent infrastructure and compute hosting
- PostHog — Product analytics (anonymized usage data)
- Sentry — Error monitoring and performance tracking
- Opik — AI agent observability and tracing
Cookies
We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used to understand how users interact with our platform. You can disable non-essential cookies in your browser settings.
International Data Transfers
Your data may be processed in the European Union (Amsterdam) and the United States, where our infrastructure providers maintain data centers. We ensure appropriate safeguards are in place for any cross-border transfers.
Your Rights (GDPR/CCPA)
Depending on your jurisdiction, you may have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to opt out of sale of personal information (CCPA)
To exercise any of these rights, contact us at privacy@vaos.sh.
Children's Privacy
VAOS is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 13, we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of VAOS after changes constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions or requests, please contact us at privacy@vaos.sh