Privacy Policy

1. Scope and who we are

Vellunox Technologies LLC ("Vellunox," "we," "us," or "our") is a Wisconsin technology-service provider. This policy applies to vellunox.com, Vellunox Guardian, client and owner centers, the VXN Agent and Guardian Device Bridge, managed-support services, service certificates, and related communications. A separate signed agreement may add service-specific terms.

2. Information we collect

Information you provide

• Contact and identity information such as name, email, telephone number, company or household, and account identifiers.
• Support requests, Guardian conversations, files you intentionally upload, service preferences, approvals, and records needed to complete requested work.
• Order, billing, agreement, tax, and transaction evidence. Stripe processes card details; Vellunox does not store full payment-card numbers.
• Communication content from channels you connect or use, including email, Microsoft Teams, telephone, website chat, and support forms.

Managed-device and service information

• Device identifiers, operating system, installed Vellunox components, enrollment, configuration, health, update, backup, security, and support status.
• Diagnostic logs and alerts from tools such as VXN Agent, Splashtop, SentinelOne, Cisco Umbrella, Microsoft services, and Azure when included in your service and authorized for the device.
• Network, browser, session, IP, error, and security-event data necessary to operate and protect the service.

3. How we use information

• Authenticate people and devices, prevent account takeover, and maintain tenant and device boundaries.
• Provide Guardian support, onboarding, monitoring, troubleshooting, maintenance, billing, service certificates, and client communications.
• Diagnose incidents, protect systems, maintain audit records, prevent fraud and abuse, and meet legal obligations.
• Improve reliability, prompts, workflows, and support quality using access-controlled operational evidence and appropriately de-identified measurements.
• Reconcile payments into the official business ledger and maintain service, consent, and entitlement records.

We do not sell personal information. We do not use client content for targeted advertising. Vellunox does not authorize public foundation-model training on a client's private content.

4. Vellunox Guardian, voice, and AI

Vellunox Guardian is Vellunox's AI-assisted support identity, not a separate person or company. Guardian may use automated systems and human oversight to answer questions, organize work, diagnose issues, draft recommendations, and route approved actions.

• Microphone access requires device or browser permission. Ordinary Guardian voice support activates through an explicit control, configured wake phrase, or active conversation session.
• Recognized text, responses, service context, and related diagnostics may be retained with the verified client or device record when needed for continuity, safety, and audit.
• Raw ambient audio is not silently uploaded as an always-on recording by the public site or standard Device Bridge. A recording or transcription feature must provide separate notice and any consent required by law.
• A voice match or spoken name alone is not sufficient authorization for sensitive actions. Passwordless or equivalent verified identity, entitlement, consent, and approval controls still apply.
• AI can make mistakes. Protected actions involving money, deletion of client data, remote control, security remediation, or other material risk remain subject to Vellunox policy and applicable approval gates.

5. Providers and disclosures

Vellunox may disclose the minimum information needed to contracted providers that help deliver the service, such as Microsoft Azure, Microsoft 365 and Azure Communication Services, OpenAI, Stripe, Splashtop, SentinelOne, Cisco Umbrella, Xero, and authorized workflow or hosting providers. Their own terms and privacy commitments also apply.

We may disclose information to comply with law, protect people or systems, investigate fraud or abuse, enforce agreements, or support a business transaction subject to appropriate safeguards. We do not disclose one client's data to another client.

6. Client separation and access

Client data is logically scoped to the verified tenant, identity, device, and service relationship. Vellunox uses access controls, device-bound credentials, server-side authorization, audit logging, and approval checks to reduce cross-client access. Internal operational roles receive only the access needed for their assigned work.

7. Retention and deletion

We retain information only as long as reasonably necessary for active service, support continuity, security, dispute resolution, accounting, warranty, legal, and audit obligations. Retention periods vary by record type. Security and transaction evidence may outlast an active account when required for fraud prevention, tax, contract, or legal purposes. Deletion requests are verified before action and may be limited by those obligations.

8. Your choices and rights

• Review and correct your account information through the available center or by contacting support.
• Revoke browser microphone permission, disconnect optional integrations, or stop an active voice session.
• Request access, export, restriction, or deletion of personal information, subject to identity verification and legal exceptions.
• Opt out of non-essential marketing communications while still receiving service and security notices.

Vellunox services are not directed to children under 13. A parent, guardian, school, or authorized organization must control services involving minors as applicable.

9. Security and incident response

We use safeguards designed for the type and sensitivity of the information, including encryption in transit, access control, passwordless and device-bound authentication where available, monitoring, secure development review, backups, and incident response. No system can promise perfect security. If Vellunox confirms a breach requiring notice, we will provide notice as required by applicable law.

10. Changes to this policy

We review this policy when the service or law changes. We update the effective date only when the policy is materially revised or formally reviewed; we do not change the date each week merely to make the page appear current. Material changes may also be communicated through the service or account contact information.