Privacy Policy

1Who we are

Vger is an AI assistant for business, made by anelion LLC ("anelion", "we", "us"). anelion is the controller of the personal information described in this policy.

For any privacy question or request, write to [email protected]. You can also use the contact form.

anelion LLC
990 Biscayne Blvd
Miami, FL 33132
United States

2The short version

You pay for Vger, so your data is not the product. We don't sell it, we don't use it for advertising, and no one at anelion reads the contents of your connected accounts. Vger acts only when you ask it to, it confirms before doing anything with real-world consequences, and it cannot delete anything in your accounts. The rest of this page is the detail behind those statements.

This summary is for orientation only — the numbered sections below govern.

3Information we collect

Information you give us

• Account information. Your name, the email address you sign in with, and your organization membership if your company uses Vger. Signing in to Vger is passwordless — we email you a short code — so there is no Vger password for us to hold, and we do not collect a phone number.
• What you say and type to Vger. Your requests and Vger's replies, kept as your conversation history so the assistant has continuity between sessions.
• Documents you upload. Files you attach to a conversation, and documents you add to your personal or your organization's knowledge base.
• Messages to us. Anything you send through the contact form, the in-app support chat, or a feedback or problem report, together with your name and email so we can reply.
• Payment details. If you subscribe, your card is entered on Stripe's own payment pages. We never see or store your card number; we store only the subscription status Stripe reports back.

Information from the accounts you connect

When you connect Google Workspace or Microsoft 365, Vger reads the data it needs to answer the request you made — a message, a calendar entry, a contact, a file, a to-do. Section 4 sets out exactly what access is granted and how that data is handled. Content retrieved to answer a request can appear in your conversation history, because it forms part of the answer you were given.

Information collected automatically

• Service records. Which actions Vger performed and how you confirmed them, when sessions started and ended, voice minutes and AI usage for billing and allowances, and error logs when something fails.
• Device and connection data. App version, platform, and the technical data needed to serve a request.
• Website analytics. The marketing website uses Google Analytics to count visits, pages viewed, approximate location, and device type. Analytics never sees anything you say or type to Vger, and never anything from your connected accounts. Any standard tracker blocker stops it and the site works normally.

4Google and Microsoft account data

This section is the detailed disclosure Google's API Services User Data Policy requires, and it applies equally to Microsoft 365 data.

What access you grant

Only what you approve on Google's or Microsoft's own consent screen, which lists it in full before you agree. Vger currently requests the ability to:

• read your mail, and send or draft mail;
• read and manage your calendar events;
• read your contacts — read-only on Google, so Vger cannot change them there;
• read, create and edit your Drive or OneDrive files; and
• read and update your to-dos.

How that data is used

Solely to provide the assistant features you are using, in direct response to a request you made. Vger reads what it needs to answer, and writes only what you have confirmed. It is never used for advertising, never sold, never shared for anyone else's purposes, and never used to build profiles of you.

How it is stored

Vger does not copy your mailbox, calendar or drive. It reads what a request needs, at the time of the request. What persists is your conversation history — which can quote content that was read back to you — and any document you chose to upload. Access tokens are encrypted at rest; we never receive your Google or Microsoft password, because sign-in happens on their pages.

How it is shared

Your request, and the account data needed to fulfil it, is sent to our AI provider to generate the response (section 5). It goes nowhere else. Under our agreement with that provider, your data is not used to train their models.

Limited Use

Vger's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. In particular: the data is used only to provide the user-facing features you see in the app; it is not transferred to others except as needed to provide those features, for security, or where the law requires; it is not used for advertising; and no human at anelion reads it, except where you have specifically asked us to look at something, where security requires it, or where the law requires it.

What Vger will never do to your accounts

It cannot delete anything — no email, no event, no file. Any delete-shaped action is refused in Vger's own code, at two separate points, before it can reach your account, and the refusal is recorded. Before Vger edits a file it saves a dated backup copy beside the original. You can withdraw access at any time from your Google or Microsoft account settings, or by disconnecting in Vger's Settings.

5How AI processing works

Vger is built on Google's Gemini models. When you talk or type, your request — and any workspace data needed to answer it — is sent to Google's AI service acting on our behalf to generate the response. Under our agreement, that data is not used to train Google's models.

Voice. The microphone runs only while the assistant screen is open and you are in a conversation; leaving that screen closes both the microphone and the connection. Speech is streamed for recognition while you speak. We never write your audio to disk — no recording of your voice is stored on our servers. What is kept is the text of the conversation, as your history.

If you supply your own Google AI key, your requests are billed to and processed under your own Google account rather than ours.

6Who else is involved

We do not sell your personal information, and we do not share it for anyone else's own purposes. We use a small number of service providers, each acting on our instructions:

• Google (Gemini AI). Processing your requests and generating responses.
• Amazon Web Services (Simple Email Service, US East). Sending transactional and assistant-initiated email.
• Stripe. Subscription payments. Stripe handles card details directly; we never receive them.
• Cloudflare. Serving and protecting our websites.
• Google Analytics. Marketing-website statistics only, as described in section 3.

We may also disclose information where the law requires it, to protect our rights or someone's safety, or to a successor if the business is transferred — in which case this policy continues to apply until you are told otherwise.

7Where your data is held

Vger is operated from the United States, and our email is sent through Amazon's US East region. Our servers and database are anelion’s own machines, co-located in Miami, Florida. If you use Vger from outside that country, your information is transferred there and handled under this policy and our agreements with the providers named above.

8How long we keep it

• Conversation history and uploaded documents are kept until you delete them or ask us to delete your account. They have no automatic expiry, by design — the assistant's usefulness depends on continuity.
• Connection tokens are deleted as soon as you disconnect the account; for Google, we also ask Google to revoke the grant at that moment.
• Account information is kept while your account exists.
• Service records — the record of actions performed and confirmed, usage and billing figures, and error logs — are kept for as long as we need them for security, billing and troubleshooting. When an account is deleted these records are retained with the link to you removed, so they no longer identify you.
• Messages you send us are kept while we deal with them and for a reasonable period afterwards.

9How we protect it

• There is no Vger password to steal: signing in is a short code sent to your email address. We never see your Google or Microsoft password either — that sign-in happens on their own pages — and the access tokens returned to us are encrypted at rest using AES-256-GCM.
• Documents you upload, in both your personal and your organization's knowledge base, are encrypted on disk.
• Traffic between the app and our servers is encrypted in transit.
• Data is isolated per user and per organization, so one account's data is not reachable from another.
• Key guardrails are enforced in code rather than by policy alone: consequential actions require your confirmation, and deletion in your connected accounts is impossible.

No service can promise perfect security. If a breach affects your personal information, we will notify you and any regulator as the law requires, without undue delay.

10Your rights and choices

Wherever you live, you can ask us to:

• See the personal information we hold about you;
• Correct anything inaccurate;
• Delete your account and its data (section 11);
• Export a copy of your conversation history and account information;
• Object to or restrict a particular use, or withdraw consent you gave.

Depending on where you live — for example in the European Economic Area, the United Kingdom, or a US state with its own privacy law such as California — you may have these rights as a matter of law, including the right to complain to your data protection authority. We do not sell or share personal information as those laws define it, and we do not use it for cross-context behavioural advertising.

To exercise any of these, write to [email protected] from the address on your account. We will respond within 30 days, and we will not treat you differently for asking.

You can also act without asking us: disconnect an account in Vger's Settings, or revoke Vger's access from your Google or Microsoft account at any time.

11Deleting your account

Ask us at [email protected] and we will delete your account. That removes your account record and, with it, your conversation history, your tasks and schedules, your uploaded documents, and your stored connection tokens.

Two things survive deletion, and we would rather say so than leave it vague. Service records — which actions ran and were confirmed, usage and billing figures, and error logs — are kept for security, billing and troubleshooting, with the link to you removed so they no longer identify you. And anything you contributed to an organization's shared knowledge base belongs to that organization and remains with it.

If you own an organization account, its ownership has to be transferred or the organization closed before your own account can be removed; write to us and we will sort it out with you.

12If your employer provides Vger

When you use Vger through an organization account, your employer is the customer and administers the service. Administrators can:

• set usage rules, in plain English, that Vger applies to every request — blocking it or flagging it for review;
• set spending caps and per-employee voice allowances;
• read the conversation history of employees in their organization, and search across the organization's conversations; and
• see which rules were triggered and which actions ran, and control who may upload documents.

In plain terms: conversations you have in a work account are visible to your employer's administrators. Your employer's own policies govern how they use that, and questions about it are best directed to them.

13Children

Vger is a business product and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, write to [email protected] and we will delete it.

14Changes to this policy

We will update this page when our practices change, and the effective date at the top always reflects the current version. If a change materially affects how we handle your information, we will tell you in the app or by email before it takes effect.

15Contact us

Questions, requests, or a concern about how your data is handled:

anelion LLC
990 Biscayne Blvd, Miami, FL 33132, United States
Email: [email protected]
Web: vgerapp.com/about.html#contact

We read every message.