Privacy

Who we are

Max Execution Digital Solutions, 22 Mc Gillivary Road, Sangre Grande, Trinidad and Tobago, is the data controller for the personal data described in this notice. Contact us at support@vaps.app.

What stays on your device

Vaps stores idea data locally in your browser so the PWA works offline. Vaps does not receive your ideas by default. You are responsible for exporting a backup before clearing site data, changing browsers, or replacing a device.

API keys and GitHub tokens are kept locally, encrypted at rest, and are excluded from Vaps backup exports. If you use an integration, selected idea content is sent directly to the provider you configure.

What we collect, and why

Personal cloud sync and shared projects are invitation-only during the closed beta and are off by default. If you are enrolled and switch one on, we process your account email and the content you choose to sync, on the basis of the contract you enter by using the service. Shared project ideas and project-scoped tags are ordinary cloud content that collaborators can read by role; credentials, preferences, drafts, and local project settings are never shared with a team.

Support diagnostics are optional and contain only app version, browser family, operating system family, viewport, online/offline state, storage estimate, PWA display mode, and database schema version. They do not contain idea content, tags, keys, tokens, encrypted secret payloads, or backups.

This marketing site (vaps.app, separate from the app itself) loads cookieless analytics -- Vercel Web Analytics and Speed Insights -- that record page views and page-load performance. It sets no cookies and identifies no individual, and we rely on our legitimate interest in understanding whether the site works. It never includes anything you type into a form or the app. If we later enable named interaction events, we will update this notice before doing so.

If you contact support@vaps.app, we use the message and any optional contact details only to respond and investigate the issue. Do not attach exports, screenshots, or logs containing ideas or secrets.

Sub-processors

• Supabase -- database and authentication for optional cloud sync and shared projects.
• Vercel, Inc. -- hosting for this site and the app, and the cookieless analytics described above.
• Amazon Web Services -- transactional email (SES) for shared-project invitations.
• Google -- webfont delivery, described below.

Third-party requests

Both this site and the Vaps app load webfonts from fonts.googleapis.com and fonts.gstatic.com. That request reveals your IP address to Google. No other third party is contacted unless you configure an AI or GitHub provider yourself.

Retention

Cloud-synced content is retained for up to 24 months after you close your account or leave the beta, then deleted. Product updates, support, and research messages are retained only while needed, reviewed quarterly, and deleted on a verified request. Vaps does not sell personal data.

International transfers

Our sub-processors may process data outside your country. Where they do, transfers rely on the European Commission's standard contractual clauses or an equivalent approved mechanism.

Your rights

You may request a copy of your personal data, ask us to correct or complete it, request deletion, ask for portability, or object to processing. Email support@vaps.app and we will respond within 30 days. Local idea data never leaves your device by default, so you can also export or erase it yourself at any time from Settings.