Privacy Policy

1. Who we are

VyQuest is operated by Vytech, Inc. (“we,” “us,” “our”). This Privacy Policy describes how we collect, use, and protect your information when you use VyQuest at vyquest.ai, our iOS app, or any related service (the “Service”).

2. Information we collect

We collect three categories of information.

Account information

When you create an account, we collect:

• Your email address
• Your name (when you provide it or your sign-in provider shares it)
• The sign-in providers you use (email/password, Google, Apple, Microsoft)
• A hashed password (only if you use the email/password sign-in option)

Content you provide

To use the Service you create or upload:

• Properties you track (names, addresses, attributes you enter)
• Documents you upload, share, or forward by email to our ingestion address
• Notes and messages you exchange with our AI assistant
• Connections to Google Drive or Dropbox folders you choose to sync

Technical information

When you use the Service we automatically collect:

• IP address and approximate location derived from it
• Browser or device type and operating system
• Pages you visit and actions you take within the Service
• Session identifiers used to keep you signed in

3. How we use your information

We use the information described above to:

• Authenticate you and keep you signed in
• Provide, maintain, and improve the Service
• Extract structured data from documents you upload or forward, using third-party AI processing (see Section 5)
• Answer your questions inside the AI assistant, using your property data and documents as context
• Send transactional emails such as verification, password reset, and important Service notices
• Detect, prevent, and respond to abuse, security incidents, or violations of our terms

We do not sell your personal information. We do not use your property data, documents, or AI-assistant conversations to train AI models.

4. Legal basis (for users in the EEA / UK)

We process your personal information to perform the contract you enter into when you create an account, to comply with our legal obligations, and based on our legitimate interest in operating and securing the Service. Where required by law we will ask for your consent (for example before connecting to your Google Drive or Dropbox).

5. Service providers we share information with

We share information with the following providers strictly to operate the Service. Each is bound by a data-processing agreement and processes information only on our behalf.

• Google Cloud Platform (Firebase, Cloud Run, Cloud Storage): hosts our application, authenticates accounts, stores your data
• Anthropic: processes the content of documents and AI-assistant messages to generate responses. Anthropic does not train its models on data sent via the API used by VyQuest
• Qdrant: indexes document content for fast search by the AI assistant
• Resend: delivers transactional email (verification, password reset, notifications)
• Google Drive, Dropbox: only when you explicitly connect them; we read documents from folders you select

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of VyQuest, our users, or others.

6. Where your information is stored

Your information is stored on Google Cloud Platform infrastructure in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States.

7. How long we keep your information

We keep your account and content for as long as your account exists. When you delete your account (see Section 8) we permanently delete:

• Your account record and authentication credentials
• Every property you own and all of its attributes
• All documents you uploaded or forwarded, including text extracts and search index entries
• All chat sessions and AI-assistant conversation history
• OAuth tokens for connected Google Drive and Dropbox accounts

Deletion is permanent and immediate. There is no recovery period and we cannot restore deleted accounts.

We retain certain audit log records (e.g. record that an account was deleted, at what time, by whom) for security and compliance purposes even after account deletion. These records contain identifiers but not the underlying content.

8. Your rights and choices

• Access and correction. Sign in and visit Settings → Account & Security to view and update your profile.
• Account deletion. Sign in and visit Settings → Account & Security → Delete account. The deletion runs immediately and cannot be undone. Inside the iOS app the same control is available under Settings.
• Linked sign-in methods. You can add or remove Apple, Google, Microsoft, or email/password sign-in from Settings → Account & Security. You must keep at least one sign-in method.
• Drive and Dropbox. You can disconnect connected folders at any time from the dashboard.
• Marketing email. We don't send marketing email. You will only receive transactional email (verification, password reset, important Service notices).
• Residents of California, the EEA, and the UK have additional rights to access, correct, port, or delete personal information. Contact us at the address below to exercise these rights.

9. AI processing disclosure

VyQuest uses Anthropic's Claude models to extract information from documents and to answer questions in the AI assistant. The content of your documents and messages is sent to Anthropic over an encrypted connection for the sole purpose of generating responses or extractions and is not used to train Anthropic's models. We do not send your account credentials to Anthropic.

10. Security

We protect your information using industry-standard measures including encryption in transit (TLS) and at rest, scoped access controls, audit logging of administrative actions, and isolated per-account credentials for connected services. No system is perfectly secure; we cannot guarantee that information will never be accessed in an unauthorized way.

11. Children

VyQuest is intended for use by commercial real estate professionals and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes we will notify you by email or by a notice inside the Service before the changes take effect. The “Effective” date at the top of this page indicates when this Policy was last updated.

13. Contact us

Questions about this Policy or your information can be sent to support@vyquest.ai.

Vytech, Inc.
support@vyquest.ai