Privacy Policy

This Privacy Policy explains what Vynakro collects, why, and what we do with it.

1. What we collect

Account data: name, email, username, company name (optional), and hashed passwords — never plaintext. Documents: the estimates, dry logs, and related files you upload, and the findings reports we generate from them. Usage and security data: sign-in events (time, IP address, browser, sign-in method), audit counts, and an operator action log. Billing: handled by Stripe — we never see or store card numbers.

2. How documents are processed

Uploaded documents are read by optical character recognition and by Anthropic's Claude AI models to extract line items and readings, which our deterministic rule engine then audits. Document text is sent to these processors solely to produce your report; we do not sell your documents or use them to train models.

3. Retention

Documents and findings reports are retained for seven (7) years from upload, then deleted — this retention supports the defensibility of your claim files. Security logs and the operator action log are retained for the life of the account. Deactivating your account revokes access but does not shorten document retention.

4. Who can see your data

Your workspace's members see the workspace's documents and reports. Vynakro operators can access account and workspace records for support and billing; every operator action is logged. Service providers we rely on: Anthropic (AI document reading), ABBYY (premium OCR, when enabled), Stripe (payments), SendGrid (email), and our hosting provider. Each receives only what its function requires. We do not sell personal information.

5. Security

Passwords are hashed; sessions are single-device with server-side revocation; two-factor authentication is available to all accounts and required on paid plans; row-level database security separates tenants; sign-in alerts notify you of every new session; and all traffic is encrypted in transit.

6. Your choices

You can change your password, enable two-factor authentication, sign out of all devices, and deactivate your account from the Account page. For access, correction, or deletion requests beyond that, email support@vynakro.com — we respond within 30 days.

7. Changes

Material changes to this policy will be announced by email or in-product notice before they take effect.

This document is a template pending review by our attorneys and may be updated.