Data Privacy & Security

Your data, your control

We understand that giving an AI access to your email and calendar requires trust. Here is exactly how we earn and maintain that trust.

Encryption

• In transit — All data is encrypted using TLS 1.3
• At rest — Data is encrypted using AES-256 encryption
• Processing — VP processes data in isolated, encrypted environments

Data storage

Your data is stored in SOC 2 Type II certified data centers. You can choose your data residency region:

• North America (US-East, US-West, Canada)
• Europe (EU-West, EU-Central)

Access controls

• VP employees cannot access your data without your explicit written consent
• Your organization's admins can manage user permissions but cannot read your communications
• You can export or delete all your data at any time

Compliance

VP is compliant with:

• GDPR (European data protection)
• SOC 2 Type II (security controls)
• HIPAA (healthcare data, available on Enterprise plan)
• ISO 27001 (information security management)

Data retention

By default, VP retains your data for as long as your account is active. When you close your account:

• All personal data is deleted within 30 days
• Anonymized, aggregated analytics may be retained for product improvement
• You can request immediate deletion at any time