Privacy Policy

1. About This Policy

VectorPath ("we," "our," or "us") is an AI-powered career content generation platform owned and operated by CodeLift LLC. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at vectorpath.app and related services (collectively, the "Service").

For more information about CodeLift LLC, please visit our company website at codelift.codes.

2. Information We Collect

2.1 Account Information

• Name and email address when you create an account
• OAuth authentication data from GitHub and Google (we never store passwords)
• Profile information including role, career goals, and tech stack preferences
• Subscription and billing information processed through LemonSqueezy

2.2 GitHub Integration Data

• Metadata Only: We only access commit messages, pull request titles, branch names, and repository descriptions
• No Source Code: We never access your actual source code files, algorithms, or business logic
• Repository privacy settings and "Build in Public" configurations
• Webhook data for commits, releases, and pull requests

2.3 Figma Integration Data

• Design file updates and version changes
• Project names and descriptions
• File metadata (not the actual design files)

2.4 Generated Content

• AI-generated social media posts and career content
• STAR stories and resume bullet points
• User edits and customizations
• Content analytics and usage patterns

2.5 Analytics and Usage Data

• Website usage analytics and conversion tracking
• Feature usage and engagement metrics
• Performance data and error logs
• Device information and browser data

2.6 Waitlist Data

• Email addresses and contact information from waitlist signups
• Plan preferences and role information
• Marketing communication preferences

3. How We Use Your Information

• Service Delivery: Generate authentic career content from your work activity
• Account Management: Create and manage your VectorPath account and subscription
• Privacy Protection: Implement AI sanitization to remove sensitive information automatically
• Product Improvement: Analyze usage patterns to enhance our AI models and features
• Communication: Send important service updates, billing notifications, and marketing communications (with consent)
• Support: Provide customer support and technical assistance
• Legal Compliance: Comply with legal obligations and protect our rights

4. Third-Party Integrations

We integrate with the following third-party services:

4.1 AI Processing

• AI Content Generation: We use enterprise-grade AI services including OpenAI and Microsoft Azure OpenAI Service for enhanced security and compliance
• Data is processed according to strict enterprise usage policies and security standards
• AI sanitization removes sensitive information before any processing

4.2 Backend Services

• Database and Authentication: Secure cloud-based database and authentication services
• All data is encrypted at rest and in transit using industry-standard encryption

4.3 Payment Processing

• LemonSqueezy: Subscription management, billing, and affiliate program
• Payment data is processed securely and never stored on our servers

4.4 Analytics and Data Collection

• Waitlist Management: Secure data collection and management for waitlist signups
• Analytics Services: User behavior and conversion tracking for service improvement

5. Data Security

• Encryption: All sensitive data is encrypted at rest and in transit using industry-standard encryption
• Access Controls: Strict access controls limit data access to authorized personnel only
• OAuth Security: We use OAuth 2.0 for secure authentication without storing passwords
• AI Sanitization: Automated detection and removal of API keys, passwords, email addresses, and other sensitive information
• Regular Audits: Regular security assessments and monitoring for suspicious activity

6. Your Privacy Rights

6.1 Data Access and Portability

• Request a copy of your personal data in JSON format
• Download all generated content and career data
• Export account settings and integration configurations

6.2 Data Deletion

• Delete your account and all associated data at any time
• Choose immediate deletion or 30-day retention period during cancellation
• Revoke OAuth permissions through your GitHub and Google account settings

6.3 Privacy Controls

• Configure repository-level privacy settings
• Use "Build in Public" settings to control content generation
• Manage marketing communication preferences

7. International Compliance

VectorPath is designed with privacy in mind. We implement privacy-by-design principles and provide comprehensive data protection controls.

For users in Arabic-speaking markets (UAE, Saudi Arabia, Egypt), we provide localized interfaces with RTL support and adapt our data processing to comply with regional regulations.

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your login session and preferences
• Analyze website usage and improve user experience
• Track conversion rates and marketing campaign effectiveness
• Provide personalized content and features

You can control cookie settings through your browser preferences.

9. Data Retention

• Active Accounts: Data is retained while your account is active and for legitimate business purposes
• Cancelled Accounts: 30-day retention period by default, with immediate deletion option available
• Waitlist Data: Retained until product launch and subsequent migration or deletion request
• Analytics Data: Anonymized analytics data may be retained for up to 2 years for business insights

10. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email and update the "Last Updated" date at the top of this policy. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Company: CodeLift LLC
• Website: codelift.codes
• Service: VectorPath (vectorpath.app)
• Email: support@vectorpath.app

For general inquiries about CodeLift LLC, please visit our company website or contact us through the channels provided at codelift.codes.