Privacy Policy

Who we are

VrittOS is operated by VrittIQ Ltd, a company registered in the United Kingdom ("we", "us"). We are the data controller for personal data processed through vrittos.ai and app.vrittos.ai. Contact: privacy@vrittos.ai.

What we collect

• Account data — name, email address, password hash (or your social sign-in identity from Google, LinkedIn, or Microsoft), organisation name.
• Product content — the ideas, requirements, documents, backlogs, and configuration you create in the platform.
• Repository and work-tracker data — when you connect GitHub or Jira, we access those systems with scoped tokens to perform the actions you initiate (creating branches, pull requests, issues). Your code remains in your repositories.
• Billing data — subscription and payment status. Card details are processed by Stripe and never touch our servers.
• Usage data — product telemetry (features used, workflow runs, credit consumption) and, on the marketing site with your consent, analytics cookies (Google Analytics, Microsoft Clarity).
• Product session analytics — in the app we use Microsoft Clarity in strict masking mode to understand how the interface is used: it records interactions and layout, and all text content (your ideas, documents, and code) is masked and never captured.

How we use it

• To provide the service: running AI agents on the content you submit, syncing with the integrations you connect, and operating your subscription (legal basis: contract).
• To secure and improve the service, prevent abuse, and understand aggregate usage (legal basis: legitimate interests).
• To send transactional email — verification, password reset, billing notices — via our email provider (legal basis: contract).
• Marketing-site analytics only with your consent (legal basis: consent, withdrawable any time).

AI processing

Content you submit to AI-powered features is sent to our large language model provider (Anthropic) to generate the requested output. We use these providers under terms that do not permit training on your data. We do not train our own models on your content.

Subprocessors

• Microsoft Azure — hosting and storage (UK/EU regions).
• Anthropic — large language model processing.
• Stripe — payment processing.
• SMTP2GO — transactional email delivery.
• Google / Microsoft — consent-based website analytics.

Retention and deletion

We keep your data while your account is active. If you delete your account or ask us to, we delete personal data and product content within 30 days, except records we must keep for legal or accounting reasons. Integration tokens are deleted immediately on disconnect.

Your rights

Under UK GDPR you can request access, correction, deletion, portability, or restriction of your personal data, and object to processing based on legitimate interests. Email privacy@vrittos.ai and we will respond within one month. You can also complain to the ICO (ico.org.uk).

International transfers

Where data leaves the UK/EEA (for example to a model provider), we rely on adequacy decisions or standard contractual clauses.

Changes

We'll post changes here and, for material changes, notify account holders by email.