1. Information We Collect
We collect information you provide directly, information generated through product use, and information received from integrations you authorize.
- Contact and account information: name, work email, company, organization, team, role, password credentials, invitation status, support messages, and waitlist requests.
- Workspace and customer content: investigations, prompts, agent plans, tool results, comments, runbooks, knowledge-base documents, uploaded files, incident notes, scheduled checks, approvals, and related metadata.
- Integration data: information from services you connect, such as GitHub, GitLab, Jira, Google Chat, Kubernetes, PostgreSQL, observability tools, MCP servers, and other customer-authorized systems. Depending on configuration, this may include repository metadata, pull requests, issues, alerts, logs, schemas, query results, messages, and infrastructure state.
- Infrastructure agent data: agent registration details, command status, discovery output, execution logs, health signals, and diagnostic metadata from customer-network agents you install.
- Usage and device data: IP address, browser, device, pages viewed, feature usage, timestamps, error logs, product analytics, cookies, and similar technologies.
- Billing and commercial data: plan selection, usage counts, invoices, payment status, and order details. Payment card data, if collected, is handled by payment processors rather than stored directly by us.
2. How We Use Information
We use information to:
- provide, operate, secure, and improve Vedin;
- authenticate users and manage organizations, teams, permissions, and invitations;
- run agent workflows, execute authorized tools, generate summaries, answer questions, and create recommendations;
- process waitlist requests, onboarding, support, billing, and product communications;
- monitor reliability, prevent abuse, debug errors, and maintain audit logs;
- measure usage, understand product adoption, and improve our website and application;
- comply with legal obligations and enforce our Terms.
3. AI Providers and Model Processing
We do not use customer content to train models, and we do not permit our AI providers to train on it. Customer content is sent to a model only to produce the output you asked for. It is not used to develop, train, fine-tune, or evaluate any model, ours or a provider's.
To perform a workflow you request, we may send prompts, connected-system context, tool outputs, investigation history, and other customer content to our AI provider. Vedin runs on Google Gemini models, accessed through Google Cloud. Google also provides the embedding and document-text-extraction models behind knowledge search and file uploads. Google processes this content as our service provider, under terms that prohibit using it to train their models.
We will update this page before adding or changing an AI provider that processes customer content.
If you configure bring-your-own model keys or self-hosted model routing, content goes to the provider you nominate under your own agreement with them. Their terms, retention settings, and training policies apply to that content instead of the commitments above, and we cannot make those commitments on their behalf.
4. Our Role, and the Legal Bases We Rely On
Vedin acts in two different roles, and different rules apply to each.
- As a controller, for the information we decide the purposes of ourselves: account and contact details, billing records, support correspondence, and website and product analytics. This Privacy Policy governs that processing.
- As a processor, for customer content — investigations, prompts, repository and infrastructure data, logs, uploaded files, and everything else that flows through your workspace from systems you connect. Your organization decides why that content is processed; we act on its instructions. Where a data processing agreement is in place, that agreement governs, and it prevails over this Policy for that content.
Where the GDPR or a similar law applies to processing we control, we rely on: performance of a contract, to provide the service and manage your account; legitimate interests, to secure the service, prevent abuse, debug errors, and understand product usage; consent, where we ask for it, such as for non-essential cookies and marketing email, which you may withdraw at any time; and legal obligation, to meet tax, accounting, and lawful-request requirements.
5. How We Share Information
We do not sell personal information. We may share information with:
- Service providers and subprocessors that help us host, secure, analyze, support, and operate the service. We maintain a current list of subprocessors and will make it available on request, and we will give notice before adding one that processes customer content.
- Google, as our cloud and AI provider, under the terms described in Section 3.
- Third-party integrations you or your administrators connect or instruct us to use.
- Organization administrators who manage your workspace and can view team activity, settings, audit logs, and user access.
- Legal, safety, and compliance recipients when required by law, to protect rights and security, or to investigate abuse.
- Successor entities in connection with a merger, acquisition, financing, reorganization, or sale of assets.
6. Cookies and Analytics
We use cookies and similar technologies for site operation, security, analytics, and product improvement. Our marketing site and web app may use analytics tools such as PostHog to understand aggregate usage and improve the experience. You can control cookies through your browser settings. Where required, we will provide additional consent choices for non-essential cookies.
7. Retention
Customer content is retained for as long as your workspace exists, and is deleted when you delete it or when your organization's account is closed, subject to the backup window below. Account, billing, and audit records are kept for as long as we are required to keep them for tax, accounting, and security purposes. Encrypted backups and security logs persist for a limited period after deletion for disaster recovery and abuse investigation, after which they are overwritten on a rolling basis. Your plan, workspace settings, and any data processing agreement may set shorter periods, and those take precedence.
8. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No system is completely secure, and you are responsible for protecting credentials, configuring integrations carefully, and limiting user access to appropriate team members.
9. Your Choices and Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export personal data. You may also opt out of marketing emails. Organization administrators may be responsible for responding to requests related to customer content controlled by their workspace.
To make a privacy request, email support. We may need to verify your identity and account authority before acting on a request.
10. International Transfers
We may process and store information in countries other than where you live. When required, we use appropriate safeguards for cross-border transfers.
11. Children
Vedin is a business product, sold to organizations and intended for use by adults acting for their employer. It is not directed to children, and we do not knowingly collect personal information from anyone under 16, or under the minimum age set by local law where that age is lower. If we learn that we have, we will delete it.
12. Changes
We may update this Privacy Policy from time to time. If changes are material, we will take reasonable steps to notify users, such as updating the date above or providing in-product notice.
13. Who We Are, and How to Reach Us
Vedin is a product of Samekar (samekar.com). Samekar is the data controller for the processing described in this Policy, except where we act as a processor for customer content under Section 4.
Questions about this Privacy Policy, and requests to exercise the rights in Section 9, can be sent to support.