Last updated: March 14, 2026
This Privacy Policy explains how Vecto (“we”, “us”, “our”) collects, uses, and protects personal data when you use the Vecto application and related services.
If you have questions about this policy or your data, contact us at the email above.
This policy applies to individuals who create an account and use the Vecto app.
The service is currently intended for individual users (B2C).
Account information
When you create an account, we collect:
User content
You may store the following information in the app:
This content is stored so the app can function and provide planning features.
Voice command data
When you use voice commands, your browser’s built-in speech recognition (Web Speech API) converts your speech to text. Depending on your browser, this audio may be processed by the browser vendor’s servers (e.g., Google for Chrome). Vecto does not receive or store audio recordings — only the resulting text transcript is sent to our servers for processing.
Data from third-party integrations
If you connect an external service, we may retrieve and process additional data as described in section 6 below.
Technical data
We automatically process limited technical data necessary to operate the service:
We do not use third-party analytics tools and do not track users for marketing purposes.
Support communications
If you contact us, we may store your message and contact details to respond.
We use personal data only to:
We do not send marketing emails and do not sell personal data.
We process personal data under the following legal bases:
Payments are handled by Stripe.
We do not store full payment card details.
Stripe may process:
Stripe acts as an independent data controller for payment processing.
You can read Stripe’s privacy policy on their website.
Vecto offers optional integrations with third-party services. These integrations are only activated when you explicitly connect them in your account settings. Below we describe each integration, what data is involved, and how it is processed.
Microsoft (Outlook Calendar)
When you connect your Microsoft account, we access the Microsoft Graph API to:
We store an encrypted OAuth refresh token so the connection persists. We do not access your emails, contacts, or files. Microsoft acts as an independent data controller for your Microsoft account data. Your data may be processed by Microsoft in the United States; Microsoft provides safeguards under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.
Google (Google Calendar)
When you connect your Google account, we access the Google Calendar API to:
We store an encrypted OAuth refresh token so the connection persists. We do not access your Gmail, Drive, or other Google services. Google acts as an independent data controller for your Google account data. Your data may be processed by Google in the United States; Google provides safeguards under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.
OpenAI (AI features)
Vecto uses OpenAI’s API to power AI features such as:
When you use these features, relevant data is sent to OpenAI for processing. This may include task descriptions, meeting notes, voice command transcripts, and contextual data such as your project and meeting names. OpenAI acts as a data processor on our behalf. OpenAI does not use data sent via its API to train its models. Your data may be processed by OpenAI in the United States; OpenAI provides safeguards under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses. OpenAI retains API inputs and outputs for up to 30 days for abuse monitoring, after which they are deleted.
Browser speech recognition (Web Speech API)
The voice command feature uses your browser’s built-in speech recognition to convert speech to text. In most browsers (such as Chrome and Edge), the audio is sent to the browser vendor’s servers (e.g., Google) for transcription. This processing is handled entirely by your browser and is subject to the browser vendor’s privacy policy. Vecto does not control or have access to this audio data.
Disconnecting integrations
You can disconnect any integration at any time via your account settings. When you disconnect, we delete the stored access and refresh tokens. Data that was already synced (e.g., calendar events displayed in your planning) may remain in our database until you delete it or your account.
We take reasonable technical and organizational measures to protect data.
Under the GDPR, you have the right to:
You can delete your account directly from within the app.
For other requests, email: support@vecto-app.com
We respond to requests within the legally required timeframe.
We do not sell or rent personal data.
We only share data when necessary with:
These providers process data under appropriate agreements (Data Processing Agreements and/or Standard Contractual Clauses where applicable).
We use only essential cookies required for login sessions and basic functionality.
We do not use:
You can disable cookies in your browser, but the app may not function properly.
We take security seriously and implement reasonable safeguards, including:
No system is 100% secure, but we continuously improve protections.
The service is primarily offered to users in the European Union. Our hosting and database infrastructure is located within the EU.
However, when you use third-party integrations (see section 6), your data may be transferred to and processed in the United States by Microsoft, Google, or OpenAI. These transfers are safeguarded by:
If accessed from outside the EU, data is still processed within the EU where possible.
We may update this Privacy Policy from time to time.
If changes are significant, we will notify users through the app or email.
The latest version will always be available within the app or on our website.
For privacy questions or requests: