Privacy Policy
Vitreon is built and operated by Tigris Tech Labs. This policy describes what Vitreon collects, how it is used, and who it is shared with — for the business owner who runs Vitreon, for their staff, and for the connected accounts a business chooses to link to it.
What Vitreon is
Vitreon runs the website, marketing, and day-to-day operations for a single local business at a time. An owner approves what goes out; Vitreon never publishes, sends, or spends on a business's behalf without a person pressing a button for that specific action.
Information we collect
- Account and business information — the owner's name and contact details, staff logins, and facts about the business (hours, services, prices, and similar) entered directly or read from a site the owner already runs.
- Connected account data, only for capabilities the owner turns on — when an owner connects an account (Gmail, Outlook, Google Calendar, Google Business Profile, Search Console, and similar), they choose exactly which capabilities to grant — reading new mail to flag enquiries, importing contacts, reading or writing calendar events — and nothing beyond that choice is requested or accessed. A capability the owner does not tick is never asked for.
- The business's own customer data — names, contact details, and messages belonging to the business's own customers, which the business controls and Vitreon processes on its behalf. This data is restricted to the business owner and to staff the owner has explicitly granted access to; it is never used to seed, test, or demonstrate Vitreon for anyone else.
- Usage and diagnostic data — standard web analytics and error logs used to keep the product working.
How we use it
- To operate the specific features a business has turned on — nothing more.
- Anything a connected account could send or publish on the business's behalf — a reply, a calendar write, a post — is prepared as a proposal and only goes out once a person approves it, sent through the business's own account rather than Vitreon's.
- We do not use this data for advertising, and we do not sell it or share it with data brokers.
Google API Services
Vitreon's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How data is stored and protected
Data lives in a Postgres database with row-level security enforced per business, so one business's data is never visible to another. Connected account tokens and API keys are held in a vault and are never exposed in plain text to the application itself. Data is encrypted in transit and at rest.
Who we share data with
- Google and Microsoft — only for the connectors a business enables, and only to operate that connection through the business's own account.
- Anthropic — powers features like drafting replies and sorting enquiries. Anthropic processes this data under its API terms and does not use it to train its models.
- Vercel and Supabase — our hosting and database providers, who store and serve the application on our behalf.
Retention and deletion
Data is kept for as long as an account is active and a connector remains enabled. Disconnecting a connector stops new data from being collected through it. To request deletion of your data, see below.
How to request data deletion
Email karim@tigristechlabs.com from the address associated with your account and ask us to delete your data. Include the business name and, if you have it, the connected account (Google, Instagram, or similar) the request applies to.
We delete account records, business data, and connected-account tokens within 30 days of a verified request. Deletion is permanent and cannot be undone. If a connected platform (Google, Meta) requires us to honor a deletion request it sends directly — for example, a user removing Vitreon from their own Meta or Google account settings — we process that the same way, within the same 30 days, without a separate email from you.
Your controls
Every connector capability can be turned on or off independently at any time. Turning one off stops the corresponding activity that night. Whether Vitreon staff may see a business's customer data is a decision that belongs to the business owner — granted by them, time-limited, and revocable at any time.
Children
Vitreon is a business tool and is not directed at children.
Changes to this policy
This policy describes Vitreon as it works today, and is updated as the product changes. We'll post changes here.
Contact
Questions about this policy or your data: karim@tigristechlabs.com.