Privacy Policy

Effective 11 November 2026 · Last updated 11 November 2026

This Privacy Policy explains how VESPERLABS (OPC) PRIVATE LIMITED ("Vesper Labs", "we", "us") collects, uses and protects personal data when you use our website vesperlabshq.com and our mobile and web apps (together, the "Services"). Each app may also show a short, app-specific privacy notice. Where it does, that notice adds to this policy.

1. Who we are

The Services are provided by VESPERLABS (OPC) PRIVATE LIMITED, a company incorporated in India (CIN U66301PN2026OPC258259), with its registered office at C-14, Shree Chembars, 379/B Guruwar Peth, Karad, Satara 415110, Maharashtra, India. For the Services, we act as the "data fiduciary" (under India's Digital Personal Data Protection Act, 2023) or "data controller" (under the EU/UK GDPR).

2. Data we collect

Data you give us

• Account details, such as your email address, a username or display name, and your password (stored only in encrypted, hashed form), when an app offers accounts.
• Content you create in an app, such as posts, notes, entries or preferences.
• Messages you send us, for example to hello@vesperlabshq.com.

Data collected automatically

• Technical data, such as device type, operating system, app version, language, approximate region (derived from IP address) and crash logs.
• Usage data, such as which features are used and when, collected through privacy-focused product analytics, so we can fix problems and improve the apps.

Data we do not collect

• We do not use advertising SDKs or cross-app tracking, and we do not track you across other companies' apps or websites.
• We do not collect your precise location, contacts or photos unless a feature clearly asks for it and you allow it.
• Payments made through the App Store or Google Play are handled by Apple or Google. We never see your full card details.

3. How we use your data

• To provide the Services: create and secure your account, store your content and run app features.
• To process subscriptions and purchases, and to confirm what you have access to.
• To keep the Services safe: prevent abuse, spam and fraud, and enforce our Terms of Use.
• To understand usage and fix bugs, using aggregated or de-identified data where possible.
• To reply to you and send important service messages, such as security alerts or changes to these terms. We send marketing emails only if you opt in, and you can unsubscribe at any time.
• To meet legal obligations.

We process your data on the basis of your consent, to perform our contract with you, for our legitimate interests (such as security and improving the Services), or to comply with the law. Where we rely on consent, you can withdraw it at any time.

4. AI features

Some apps include features powered by third-party AI models, for example to moderate content or generate responses. When you use such a feature, the text you provide is sent to the AI provider only to produce that result. We choose providers that do not use this data to train their models, and we never send your name or email with it.

5. Who we share data with

We do not sell or rent your personal data. We share it only with:

• Service providers who help us run the Services under contracts that require them to protect your data, such as cloud hosting and databases, email delivery, product analytics, AI processing and payment processing.
• Apple and Google, as needed to process in-app purchases and subscriptions.
• Authorities, when required by law or to protect the rights, safety and property of our users or others.
• A buyer or successor, if our business or an app is sold or merged. This policy will continue to protect your data.

6. Where your data is stored

Our service providers may store and process data outside India, for example in the United States or the European Union. When we transfer data, we take steps to make sure it stays protected, as permitted under Indian law and, where applicable, through safeguards such as standard contractual clauses.

7. How long we keep data

We keep personal data only as long as your account is active or as needed to provide the Services. When you delete your account, we delete or anonymise your personal data within 30 days. Some records may be kept longer only where the law requires it (for example, tax and billing records), and backups are overwritten on a rolling basis.

8. Your rights and choices

Depending on where you live, you can:

• Access the personal data we hold about you, and get a copy of it.
• Correct or update it.
• Delete it, including deleting your whole account.
• Withdraw consent, or object to or restrict certain processing.
• Nominate another person to exercise your rights if you are unable to (India).
• Complain to a data protection authority, such as the Data Protection Board of India, or your local authority in the EU or UK.

Deleting your account

Apps that let you create an account also let you delete it from inside the app (usually under Settings → Account → Delete account). You can also email hello@vesperlabshq.com from the address linked to your account, and we will delete it. We may ask you to confirm your request to protect your account.

To exercise any right, write to hello@vesperlabshq.com. We reply within 30 days.

9. Security

We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), encrypted password storage, access controls and limited staff access. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

10. Children

Our Services are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Additional information for some regions

EU and UK users: you have the rights listed in section 8 under the GDPR. California users: we do not sell or "share" personal information for cross-context behavioural advertising, and you may request access to or deletion of your information as described above. We will not discriminate against you for exercising your rights.

12. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will let you know in the app or by email before they take effect. The date at the top shows when it was last updated.

13. Contact and grievance officer

Questions, requests or complaints about your personal data can be sent to our Grievance Officer:

We acknowledge complaints within 48 hours and aim to resolve them within 30 days.