Privacy Policy

Legal information and policies

Vega Privacy Policy

Last Updated and Effective Date: September 25, 2026

This Privacy Policy describes how NameTech Inc. ("Vega," “we,” “our,” or “us”) collects, uses, discloses, and otherwise processes personal information about you, and explains your data privacy rights. This Privacy Policy applies to personal information we collect online, such as when you visit our website, https://vegaevents.com, use our mobile application (collectively, our “Platforms”), use our services, or otherwise interact with us (collectively, our “Services”).

Personal Information vs Platform Content

For the purposes of this Privacy Policy:

  • Personal Information refers to information that identifies, relates to, describes, or can reasonably be linked to an individual user (such as name, email address, phone number, or account credentials).
  • Platform Content refers to data created, uploaded, or managed within the Services that is not inherently tied to a single individual, including but not limited to events, organizations, groups, guest lists, and related metadata.

Platform Content may contain Personal Information depending on how it is used (for example, attendee names in a guest list). However, Platform Content is generally treated as shared or organizational data and may not be deleted solely upon an individual user’s request where other users retain ownership or access rights, subject to applicable law, including any legal rights to erasure or redaction, which will be honored.

We may provide additional privacy notices for specific features or services, in which case those notices will supplement or replace this Privacy Policy where applicable.

We may update this Privacy Policy from time to time. If we make changes, we will revise the date at the top of this Policy.

1. WHAT INFORMATION DO WE COLLECT?

Information You Provide

We collect personal information you provide directly to us, including:

  • Contact Information: Name, email address, phone number
  • Date of Birth: Used to apply age-appropriate privacy protections
  • Payment Information: Payments are processed by Stripe, our payment processor. We do not store full payment card numbers.
  • Connected Account Data: When you connect a Google account for calendar sync, we collect your Google email address, an encrypted refresh token, and the IDs of the calendars we create in your account (see Section 6 for details)
  • AI Feature Inputs: Prompts, messages, files, images, and other content you submit to AI-powered features, and the responses those features generate (see Section 7 for details)
  • Other Information: Any information you provide through forms, support, chat, or account registration

Automatically Collected Information

We may automatically collect:

  • Device and Usage Information: IP address, browser type, device identifiers, pages visited, timestamps, and interactions
  • Performance and Diagnostic Information: Page load times, the speed and status of requests the app makes, error counts, and general device characteristics such as browser, operating system, screen size, and language settings (see Section 5)
  • Geolocation Information: We may collect approximate geographic location (such as inferred from IP address) and, in certain cases, precise geographic location where enabled by your device or permissions, to support features such as localized search and service optimization
  • Cookies and Tracking Technologies:
    Non-essential tracking (analytics, marketing) is disabled by default and only activated with your consent

2. HOW DO WE USE YOUR INFORMATION?

We use personal information to:

  • Provide, operate, and improve our Services
  • Manage accounts and authenticate users
  • Process transactions
  • Communicate with you
  • Personalize user experience
  • Provide AI-powered features you choose to use
  • Detect and prevent fraud and security incidents
  • Monitor the performance and reliability of our Services
  • Debug and fix issues
  • Comply with legal obligations
  • Respond to privacy requests

3. HOW DO WE DISCLOSE YOUR INFORMATION?

We do not sell personal information for monetary consideration.

We do not share personal information for cross-context behavioral advertising unless you explicitly opt in. Users may withdraw consent at any time.

We may disclose information:

  • Service Providers: Hosting, infrastructure, analytics, performance monitoring, AI model providers, payments, etc.
  • Advisors: Legal and professional advisors
  • Legal Requirements: Law enforcement or regulatory compliance
  • Business Transfers: Mergers, acquisitions, financing
  • With Consent: At your direction
  • Aggregated/De-Identified Data: Non-identifiable data

Subprocessors

We maintain a list of key subprocessors that process personal information on our behalf. This list is available on our Trust page or upon request.

4. HOW DO WE RETAIN YOUR INFORMATION?

We retain personal information only as long as necessary for the purposes described.

  • Account Data: Retained while account is active; anonymized upon deletion
  • Guest/Transactional Data: Retained up to one (1) year
  • Other Data: Retained as needed for business or legal purposes

We may retain information longer where necessary to:

  • comply with legal obligations
  • resolve disputes
  • enforce agreements
  • maintain security logs and audit trails

Residual data may persist in backups for a limited period and is securely deleted according to retention schedules.

5. ANALYTICS AND PERFORMANCE MONITORING

We use analytics providers (such as Google Analytics) to understand usage patterns, and performance monitoring providers (such as New Relic) to measure how quickly and reliably our Services load and respond and to detect errors.

  • Analytics and performance monitoring are only enabled with consent
  • Performance monitoring collects technical information such as page load times, request timing and status, error types, general device and browser characteristics, and approximate click positions on the screen. It is designed to exclude names, email addresses, account and organization identifiers, form entries, search text, and the specific records you view.
  • These providers may receive your IP address and may store a session identifier on your device, as is standard for such tools
  • Users may opt out via browser settings or tools, or by withdrawing consent through our cookie preferences

6. GOOGLE CALENDAR INTEGRATION

Google Calendar integration. When you connect a Google account to Vega to sync a group’s events, we request your Google email address (scopes: openid, email) and permission to manage only the calendars Vega creates in your account (scope: https://www.googleapis.com/auth/calendar.app.created). We do not access, read, or modify any other calendars or events in your Google account. We store the connected email, an encrypted refresh token, and the IDs of the calendars we created. You can stop syncing a group or disconnect a Google account at any time from Vega’s settings.

Our use of data received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: we use this data only to provide the calendar sync feature, we do not use it for advertising, we do not transfer it to others except as needed to provide the feature or as required by law, and we do not allow humans to read it except with your consent, for security, or as legally required.

7. AI FEATURES

Some features of our Services use artificial intelligence ("AI Features"), such as the Vega Assistant and AI-assisted imports that turn text, spreadsheets, or images into events or staff lists. AI Features are currently offered to organization administrators and staff.

Information processed. When you use an AI Feature, we process the content you submit (such as prompts, messages, files, and images) and the responses generated. To complete your request, an AI Feature may also use organization information you are permitted to access, such as events, spaces, and groups.

AI providers. We send this information to third-party AI model providers, such as Anthropic, and other model providers we may access through OpenRouter, to generate responses. These providers act as our service providers and process information on our behalf.

No model training. We do not permit our AI providers to use your inputs or outputs to train their AI models.

Retention by AI providers. Our AI providers may retain inputs and outputs for a limited period under their own data retention policies, for example to monitor for abuse and misuse, maintain safety, or comply with legal obligations, before deleting them.

Retention by Vega. We store AI Feature conversations and results so you can return to them, along with usage records used for billing and credit tracking. This information is retained as described in Section 4.

Human review. Authorized Vega personnel may review AI Feature conversations and results to provide support, investigate problems or feedback you submit, improve quality, and maintain safety and security.

Accuracy. AI-generated output may be inaccurate or incomplete. Review it before relying on it. We do not use AI Features to make decisions that produce legal or similarly significant effects about you.

Sensitive information. Please do not submit sensitive personal information to AI Features unless it is necessary for your request and you have the right to share it.

8. YOUR PRIVACY RIGHTS

Depending on your location, you may have rights to:

  • Access your data
  • Delete your data
  • Correct your data
  • Opt out of sale/sharing
  • Non-discrimination

How to Exercise Your Rights

You may submit requests via:

We respond within 45 days.

Identity Verification

We may verify your identity using reasonable methods appropriate to the request, including:

  • confirming access to your account
  • verifying your email address
  • requesting additional information where necessary

Account Deletion Clarification

When you delete your account:

  • Your Personal Information will be deleted or anonymized
  • Platform Content (such as events, groups, or organizations) may be retained if:
    • other users have ownership or access
    • retention is required for legal or operational purposes
    • subject to applicable law, including any legal rights to erasure or redaction, which will be honored

9. YOUR CHOICES

  • Cookie preferences (opt-in required)
  • Global Privacy Control honored
  • Account deletion available
  • Email/text opt-outs available

We are not responsible for third-party privacy practices.

11. CHILDREN AND MINORS

  • Services are not intended for children under 13
  • We do not knowingly collect data from children under 13 without parental consent
  • If discovered, we will delete such data promptly

Users under 16 receive additional privacy protections, including disabled tracking.

Parents may request deletion of a child’s data.

12. DATA SECURITY

We implement reasonable safeguards, but no system is completely secure.

13. CHANGES TO THIS POLICY

We may update this Policy periodically.

14. CONTACT US

NameTech Inc.
support@vegaevents.com