Last updated: April 18, 2026
1. Overview
This Privacy Policy explains how VANDR AI ("we", "us", "our") collects, uses, and protects your information when you use our platform.
VANDR AI is a SaaS sales efficiency platform providing AI-powered tools to manage and scale sales, including lead and customer management, invoicing, messaging, analytics, and automation.
By using our services, you agree to this policy.
2. Information We Collect
Personal Information
- Name
- Email address
- Phone number
- Company details
- Account credentials
Usage Data
- App activity (features used, actions taken)
- Device/browser data
- IP address
3. How We Use Your Information
- Provide and operate the platform
- Manage your account
- Improve features and performance
- Communicate with you
- Ensure security and prevent fraud
4. Data Sharing
We do not sell your data.
We may share data only:
- With service providers
- To comply with legal obligations
- To protect our rights and users
4a. End-to-End Encryption
Your business data (leads, customers, sales, invoices, expenses, meetings, notes, products and settings) is encrypted in your browser with AES-256 before it is sent to us. The key is locked with your password and with a recovery key that only you hold. We store only the encrypted copy and cannot read it, and neither can anyone with access to our database.
Because of this:
- If you forget your password, your recovery key is the only way to unlock your data. We cannot reset it or recover the data for you.
- Some information is needed to run your account and is not end-to-end encrypted: your email, name, phone and company, your plan and payment status, support messages you send us, and the Google Calendar connection used to sync meetings.
- When you generate an AI email reply, the message and the context you chose are sent through our server to our AI provider to write the draft. They are not stored by us.
5. Data Retention & Account Deletion
When you delete your account, the following is permanently deleted from our systems:
- Your authentication credentials (email, password, sessions)
- Your profile (name, phone, company, consent records)
- All active sessions across every device you signed in from
- All of your encrypted business data, and the encryption key that could open it
- Your support conversations, cancellation feedback, plan and coupon records
- Your Google Calendar connection and its tokens
Copies in our database provider's backups expire on its schedule (up to 7 days). Any business data in them stays encrypted with a key that no longer exists anywhere, so it can never be read again.
Certain records are retained for legitimate business and legal purposes, with personal identifiers removed:
- Deletion logs: we keep a minimal audit record (your email, deletion timestamp, and optional reason) for compliance and abuse-prevention purposes only. This record is never accessible from the application and is not used for anything other than audit.
Server-side deletion applies across all devicesonce processed.
5a. Data Stored on Your Device
So the app works instantly, a decrypted copy of your data is kept in your browser on each device you sign in to, along with the key to unlock it.
- Local data is automatically cleared on sign-out and on account deletion on the device performing the action.
- We cannot remotely wipe local data on devices where you remain signed in offline. However, locally stored data is not accessible without a valid authenticated session. Once your account is deleted, that data cannot be uploaded, viewed, or used within the app on any device.
6. Your Rights
You can:
- Access your data
- Update your data
- Request deletion
- Export your data
Use the Data & Privacy section in your account.
7. Security
We use reasonable safeguards, but no system is 100% secure.
8. Cookies
We use cookies for sessions, performance, and analytics. See the Cookie Policy below.
9. Contact
Email: vandrprivacy@gmail.com
10. Updates
We may update this policy.
11. Age Restriction
VANDR AI is only for individuals 18+.
Users under 18 are not allowed.
If detected, accounts and data will be deleted.