Privacy Policy

Vektor provides a team project-tracking application for managing projects, tasks, workload, and time off. This policy applies to information processed through the Service. For workspaces created by an employer or team administrator, that organization is the controller of its members' data and we act as a processor on their behalf.

• Account information — your name, email address, role (admin or member), and a securely hashed password.
• Content you create — projects, tasks, comments and @mentions, progress and due dates, and time-off (PTO) requests.
• Usage & activity — an activity/audit log of actions taken in the Service (e.g., status changes, approvals), with timestamps.
• Technical data — authentication cookies/session tokens and basic request metadata needed to operate and secure the Service.

We do not intentionally collect special-category (sensitive) personal data, and we ask that you not store it in free-text fields.

• To provide, maintain, and secure the Service and your account.
• To display projects, tasks, workload, notifications, and time-off to authorized members of your workspace.
• To send transactional emails (for example, account welcome details and password-reset links).
• To keep an audit log for security, accountability, and troubleshooting.
• To comply with legal obligations and enforce our Terms of Use.

Where the GDPR or similar laws apply, we process personal data on the bases of performance of a contract (providing the Service), our legitimate interests (securing and improving the Service), your consent (where required), and compliance with legal obligations.

We use strictly necessary cookies/tokens to keep you signed in and to protect against abuse. We do not use third-party advertising cookies. Because these cookies are essential to the Service, disabling them may prevent you from signing in.

We do not sell your personal information. We share data only with:

• Other authorized members of your workspace, according to role-based permissions.
• Infrastructure and email-delivery providers that process data on our behalf under appropriate agreements (for example, our email provider used to send password-reset and welcome messages).
• Authorities or third parties where required by law or to protect rights and safety.

We retain account and content data for as long as your workspace is active or as needed to provide the Service. Activity/audit records are retained for accountability and may be purged by administrators. Deleted time-off entries are soft-deleted (kept for records and restorable) before permanent removal. When data is no longer needed, we delete or anonymize it.

Passwords are stored only as salted hashes and are never visible to us. We use encrypted connections (HTTPS) and role-based access controls. No method of transmission or storage is 100% secure, but we work to protect your information using reasonable safeguards.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. If your account was created by an organization, please direct requests to your workspace administrator; otherwise contact us at privacy@vektornow.com.

Your information may be processed in countries other than your own. The Service is not directed to children under 16, and we do not knowingly collect their personal data.

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated within the Service.

Questions about this policy or your data? Contact us at privacy@vektornow.com.