Privacy Policy

1. Architectural Data Boundaries & Zero-Knowledge BYOC Principle

VectorDuct builds developer infrastructure, API routing middleware, and multimodal workflow connectors. Because our software is designed primarily for self-hosted and private cloud environments, we maintain a strict architectural separation between Corporate Operational Data and Infrastructure Runtime Data:

• Self-Hosted & Private VPC Isolation: When you deploy VectorDuct software components within your own cloud infrastructure, virtual private cloud (VPC), or on-premise servers, all upstream model credentials (Bring-Your-Own-Credentials / BYOC), API tokens, input prompts, multimodal payloads, and inference outputs remain strictly within your controlled network boundary.
• No Unauthorized Callbacks or Payload Inspection: Our software distributions do not contain hidden telemetry beacons, credential harvesting routines, or payload mirroring mechanisms. You retain sole ownership and act as the sole Data Controller for all runtime traffic processed through your self-hosted instances.

2. Information We Collect

We adhere to the principle of data minimization and collect only the information necessary to operate our website and deliver contracted services:

• Business & Support Inquiries: When you contact us via email, request architectural consulting, or submit technical inquiries, we collect the contact details and context you voluntarily provide, such as your name, corporate email address, organization name, and message content.
• Edge Network & Security Logs: When you access https://vectorduct.com, our edge delivery network automatically records standard connection metadata—such as anonymized IP addresses, browser user-agents, timestamps, and requested URIs—solely for DDoS mitigation, security auditing, and operational reliability.
• Diagnostic Telemetry (Contracted Enterprise Services Only): For enterprise clients engaging VectorDuct for managed deployment or custom SLA support, access to system-level operational metrics (e.g., gateway latency histograms, HTTP status codes, and aggregate token rate counters) is governed strictly by the applicable Master Services Agreement (MSA) or Statement of Work (SOW), and typically resides within the client's designated environment.

3. How We Use Information

We process collected information exclusively for legitimate business purposes:

• To respond to technical inquiries, partnership proposals, and support tickets;
• To perform obligations under commercial engineering contracts and administer billing;
• To monitor, detect, and prevent security incidents, network abuse, or fraudulent activity;
• To comply with applicable legal obligations, regulatory inquiries, and statutory requirements.

4. Cookies and Tracking Technologies

Our website is engineered with a privacy-first posture. We do not deploy third-party behavioral advertising cookies, cross-site tracking pixels, or data broker scripts. Any technical cookies or local storage tokens utilized on our site are strictly necessary for basic network routing, security verification, and user interface preferences.

5. Data Sharing and Sub-Processors

VectorDuct does not sell, rent, or monetize personal data. We only disclose limited information under the following circumstances:

• Infrastructure Sub-Processors: Trusted third-party service providers that host our static web assets, DNS routing, and corporate email infrastructure, bound by confidentiality and data protection obligations;
• Legal Compliance: When required by law, subpoena, or legal process, or when necessary to protect the security, rights, and property of VectorDuct and our users.

6. Data Security and Retention

• Security Controls: We implement industry-standard technical and organizational safeguards—including TLS 1.3 encryption in transit, least-privilege access controls, and hardware-backed multi-factor authentication—to protect business communications against unauthorized access or disclosure.
• Retention Period: We retain business correspondence and inquiry records only for as long as necessary to fulfill the purposes outlined in this policy, maintain ongoing business relationships, or satisfy legal, tax, and accounting requirements.

7. Your Privacy Rights

Depending on your jurisdiction (including under the GDPR, UK GDPR, or CCPA/CPRA), you may have the right to request access to, correction of, portability of, or deletion of your personal contact records held by us. To exercise these rights, please submit a request to our team at the contact address below.

8. Contact Us

For questions regarding this Privacy Policy, data governance practices, or compliance inquiries, please contact us at:

• Email: contact@vectorduct.com / founders@vectorduct.com
• Website: https://vectorduct.com