Legal
Last updated: March 2026
Vicky AI is built on a zero-knowledge architecture. Your intelligence profile, conversations, and personal data are yours — we do not sell, share, or monetize your information. Privacy is not a feature; it is the foundation of the Service.
We collect information you provide directly, including your name, email address, and intelligence profile data. We also collect usage data such as conversation history and session information to provide and improve the Service.
Third-party API credentials you connect (such as trading or calendar integrations) are encrypted with AES-256-GCM before storage. We do not have access to your plaintext credentials.
Your data is used exclusively to provide and personalize the Service — specifically to build your AI context and enable Vicky to serve you accurately. We do not use your data to train AI models. We do not share your data with third parties except as required to operate the Service (e.g., our hosting and infrastructure providers).
All data is encrypted in transit (TLS 1.3) and at rest (AES-256-GCM). We maintain comprehensive audit logs of all account activity. You can view your audit log and active sessions from your Security settings at any time. For a full overview of our security practices, visit our Security page.
You have the right to access, export, and delete your data at any time. You can export all your data or permanently delete your account from your Security settings. Deletion is irreversible and removes all data associated with your account within 30 days.
Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including GDPR and CCPA. To exercise any such rights, contact us through the platform.
We use only essential cookies required for authentication and security. We do not use tracking or advertising cookies. Your session is maintained securely via encrypted server-side cookies.
We will notify you of any material changes to this Privacy Policy via email or through the Service. Your continued use of the Service after such notification constitutes acceptance of the updated policy.