Back to Vector

Vector Privacy Policy

Effective date: August 30, 2026

Last updated: August 30, 2026

This Privacy Policy explains how Yazev (“Yazev,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal data when you use Vector.

At a glance

1. Scope

This Policy applies to the Vector web SaaS at app.vector.yazev.net, the public website at vector.yazev.net, and related support and communications (the “Service”). It does not apply to unrelated Yazev products or to third-party services that publish their own privacy notices.

2. Who is responsible for your data

Yousef Basem Mohamed Mohamed Abdellatif, an individual trading under the unregistered trade name Yazev, is the controller of personal data processed to operate Vector. The controller operates from Egypt. Yazev is a trade name and is not a corporation, limited-liability company, or separate legal entity.

For privacy questions or requests, contact:

Yazev — Vector Privacy
Yousef Basem Mohamed Mohamed Abdellatif, an individual trading as Yazev
Apartment 141, Ahmed Kamal Hamdy Street
First Neighborhood, 16th District
Sheikh Zayed City, Giza Governorate, Egypt
support@yazev.net
https://app.vector.yazev.net

Some providers, such as Lemon Squeezy in its role as merchant of record, act as independent controllers for information they collect directly under their own terms. Section 7 explains this further.

3. Personal data we collect

A. Account and authentication data

When you create or use an account, we process:

Your password is sent directly to Supabase Auth over an encrypted connection. Yazev does not store the readable password in Vector’s product-content tables. Supabase stores the authentication credential in protected form and manages the session.

B. Content you provide

Depending on the features you use, we collect:

Do not provide payment-card numbers in Vector’s free-text fields. Vector does not require government identifiers, passwords, private keys, protected health information, or other highly sensitive information.

C. Data generated or inferred by Vector

Vector’s automated systems generate and store some of the following:

State and Memory can be inaccurate because they are generated from your text by AI. They are used to personalize Vector, not to make decisions that have legal or similarly significant effects about you.

D. Website data

The public website uses Cloudflare Web Analytics. This can produce aggregate information about page views, referral source, country, device type, browser, operating system, page performance, and errors. Cloudflare states that Web Analytics does not use cookies or local storage, does not fingerprint visitors, and does not track individuals over time for analytics.

E. Service, device, and security data

When you access the Service, Yazev and its infrastructure providers may automatically process:

The audited web application does not include advertising trackers or request access to precise device location, contacts, camera, or microphone.

F. Purchase, checkout, and subscription data

When you start a checkout or use Paid Services, Lemon Squeezy collects payment and billing details directly. Yazev may receive or store:

Yazev does not receive or store the full payment-card number when checkout is hosted by the billing provider.

G. Plan entitlement and usage-meter data

To provide plan access and enforce the free daily limits, Vector stores:

These records are used to count Vance presses and Origin interactions, reset free limits by UTC date, avoid duplicate counting, apply Premium access, and investigate abuse or billing-access errors.

4. Where personal data comes from

We receive personal data:

5. How we use personal data

We use personal data to:

We do not use your Vector SaaS content for targeted advertising. We do not use it to train our own general-purpose AI model. Under OpenAI’s default API data controls, API inputs and outputs are not used to train OpenAI models unless the API customer affirmatively opts in. Yazev does not authorize such an opt-in for Vector content without separate notice and any consent required by law.

6. AI processing and automated personalization

Vector sends different context to OpenAI depending on the action you request. Context may include your goal, current task, current message, relevant Origin branch, reviewed State, selected relevant Memory, a task-completion note, or the current onboarding exchange. Vector does not send the entire raw task history to Vance when asking for a next task. Uploaded files are not included in OpenAI prompts unless a feature clearly tells you that they will be.

OpenAI is used to:

OpenAI states that its default API abuse-monitoring logs may contain prompts, responses, and related metadata and may be retained for up to 30 days, unless law requires longer retention. OpenAI also states that Chat Completions and Embeddings do not retain separate application state under the default endpoint behavior. See OpenAI’s API data-controls documentation for current details.

Vector’s automated processing recommends content and organizes context, but it does not make decisions that have legal or similarly significant effects. You can ignore a task, correct information through your interactions or a privacy request, erase Vector data, or request account deletion.

Sensitive information

Free-form text can reveal or allow an AI system to infer health, disability, religion, political views, sexual orientation, ethnicity, union membership, or other legally protected sensitive information. Vector does not require this information and is not intended to process it. Please do not submit sensitive information unless a feature specifically requests it and presents the consent or other safeguards required in your location.

If you voluntarily include sensitive information in free-form content, the Service will technically process it as part of the content you submitted and may derive State or Memory from it. We use such information only to provide the feature you requested, not for advertising or high-impact eligibility decisions. You may erase it or contact us to request deletion or correction. Where explicit consent is legally required and Vector has not presented an appropriate consent request, do not submit the information.

7. How we disclose personal data

We disclose personal data only as described here. We do not sell personal data and do not share it for cross-context behavioral advertising.

Service providers

These providers may use their own subprocessors. We may replace a provider when reasonably necessary and will update this Policy if the change materially affects your privacy.

Other disclosures

We may also disclose data:

8. Local storage, cookies, and similar technologies

Vector keeps local copies of goals, tasks, onboarding status, State, Memory, and Origin conversations so the app can load quickly and retain some functionality when the cloud is unavailable. Authentication session tokens may also be kept in persistent app or browser storage to keep you signed in.

Local storage is protected primarily by your device, operating system, browser profile, and account security. Secure your device, use a strong password, and avoid using Vector on an untrusted shared browser profile. Clearing the site’s browser data or using the in-Service erasure control can remove local copies in that browser profile, but these actions do not necessarily delete cloud data unless the erasure flow finishes successfully.

The Vector website may use cookies or similar technology strictly necessary for security, network operation, and any authenticated web session. The Cloudflare Web Analytics beacon on the public site does not use cookies or local storage for analytics. If we add non-essential cookies or tracking that requires consent, we will provide an appropriate choice before using it where required.

9. Retention and deletion

We apply the following criteria:

If you use Vector on multiple devices or browser profiles, local cached copies may remain in another browser profile after you erase data from one device. Clear Vector’s site data in those browser profiles or contact us for help. A browser that remains offline may not receive a cloud deletion immediately.

We may retain de-identified or aggregated information that cannot reasonably identify you.

10. Security

We use measures designed to protect personal data, including encrypted HTTPS connections, authenticated API access, per-user database row-level policies, provider access controls, and deletion controls. The Supabase project’s primary database is currently located in the Central EU (Frankfurt) region.

No service can guarantee absolute security. Local cached data depends on the protections of your device and browser, and internet transmissions and third-party systems carry risk. If you believe your account or data is at risk, contact us promptly at support@yazev.net.

11. International data transfers

Yazev operates from Egypt. Vector’s primary Supabase project data is currently hosted in Frankfurt, Germany, while OpenAI, Cloudflare, Resend, Lemon Squeezy, their subprocessors, and support personnel may process data in the United States and other countries. Those countries may have different data-protection laws from yours.

Where required, we rely on contractual safeguards, data-processing agreements, standard contractual clauses, provider data-residency controls, consent, necessity to perform the Service you requested, or another lawful transfer mechanism. You may contact us for information about safeguards relevant to your data.

Where a law requires a legal basis, we rely on:

If we ask for information that is required to provide a feature, we will identify it through the interface or context. Without account credentials and core goal content, we cannot provide the authenticated personalized Service.

13. Your choices and privacy rights

Depending on where you live, you may have rights to:

Product-data erasure

In Vector settings, Erase Vector data is designed to delete the signed-in user’s goal, task history and notes, onboarding record, State, Memory and embeddings, Origin conversations, local caches on the current device/profile, and files in the user’s cloud folder.

This product-data erasure does not delete the authentication account or email, username or display name, policy-acceptance metadata, free-tier usage-meter records, product-access entitlement, or checkout and subscription records. Use Delete account for the broader deletion described below.

If the erasure flow reports an error, do not assume deletion completed. Retry or contact us.

Account deletion and other requests

You can use Delete account in Vector’s Account settings to permanently delete your authentication account and associated active Vector data, including your profile, content, usage meters, plan entitlement, and Vector’s checkout and subscription records. To prevent billing without account access, the control requires you to cancel an active, trialing, paused, or past-due subscription first. A cancelled subscription may otherwise preserve Premium access until the end of its paid period; deleting the account ends your ability to use that remaining access. Type the confirmation text shown in the interface before deletion proceeds.

Deletion cannot be undone. Restricted backups, provider security logs, support or legal records, and transaction records held by Yazev, Lemon Squeezy, or other providers may still be retained where law requires or permits, as described in Section 9.

To request an export or correction, object, restrict processing, withdraw consent, obtain deletion assistance, or exercise another right, email support@yazev.net from the account email where possible. Describe the request and the jurisdiction whose rights you are invoking. We may verify identity.

We will respond within the period required by applicable law. EEA and UK requests are generally answered within one month, subject to lawful extensions. If we deny a request, we will explain the reason and available appeal or complaint options when required.

You may complain to the Egyptian Personal Data Protection Center, your local EEA supervisory authority, the UK Information Commissioner’s Office, or another competent regulator.

14. United States state privacy disclosures

This section applies where a U.S. state privacy law applies to Yazev’s processing.

In the preceding 12 months, Vector may have collected the following statutory categories: identifiers; customer-record information; commercial information for Paid Services; internet or electronic-network activity; user-generated content; account and security data; inferences and profiles; and sensitive personal information if a user voluntarily included it in free-form content.

Sources are described in Section 4. Business and commercial purposes are described in Section 5. We disclose these categories to the service-provider and contractor categories in Section 7 for those purposes. Purchase data may be disclosed to an independent merchant of record. We retain each category using the criteria in Section 9.

Yazev does not sell personal information, does not share it for cross-context behavioral advertising, and has not done so in the preceding 12 months. We do not knowingly sell or share the personal information of anyone under 16. We do not offer a financial incentive in exchange for personal data.

Where applicable, you may request to know, access, correct, delete, or obtain portable data; limit certain uses of sensitive personal information; and opt out of sale, sharing, targeted advertising, or qualifying profiling. Because we do not sell or share personal information for behavioral advertising, no opt-out is currently necessary for those practices. We will not discriminate against you for exercising a privacy right.

An authorized agent may submit a request where law permits. We may require proof of authority and direct identity verification. Use the contact method in Section 13.

15. Children’s privacy

Vector is not directed to children under 16, and we do not knowingly collect personal data from them. Do not create an account if you are under 16. If you are a parent or guardian and believe a child under 16 submitted personal data, contact us so we can investigate and delete it.

16. Changes to this Policy

We may update this Policy as the Service, providers, or law changes. We will post the updated Policy and revise the date above. If a change materially affects how we use previously collected personal data, we will provide additional notice or seek consent when required.

17. Contact us

For privacy questions, account deletion, or rights requests:

Yazev — Vector Privacy
Yousef Basem Mohamed Mohamed Abdellatif, an individual trading as Yazev
Apartment 141, Ahmed Kamal Hamdy Street
First Neighborhood, 16th District
Sheikh Zayed City, Giza Governorate, Egypt
support@yazev.net
https://app.vector.yazev.net