Privacy Policy

Last updated: September 24, 2025

This Privacy Policy explains how Vicstry ("Vicstry", "we", "us") collects, uses, shares, and protects your information when you use our websites, applications, and services (the "Services"). By using the Services, you agree to the practices described here.

Information We Collect

Account and Profile: name, email address, organization, role, and authentication identifiers.

Usage Data: app interactions, feature usage, device information, approximate location (derived from IP), and logs for security and diagnostics.

Content You Provide: uploaded documents, prompts, messages, interviews, and configuration settings you create in Vicstry.

Third‑Party Integrations: if you connect services (e.g., Google Calendar), we receive tokens and metadata necessary to provide the integration.

Cookies and Similar Technologies: used for authentication, preferences, analytics, and security.

How We Use Information

Provide and improve the Services, including personalized features and recommendations.

Authenticate users, maintain security, prevent abuse, and investigate incidents.

Operate integrations you enable (e.g., scheduling interviews via your calendar).

Communicate with you about updates, security notices, and support. You can manage non‑essential communications in Settings.

Comply with legal obligations and enforce terms.

Legal Bases (EEA/UK users)

Contract: to provide the Services you request.

Legitimate Interests: to secure and improve the Services, prevent fraud, and understand usage.

Consent: where required (e.g., certain analytics, connected integrations).

Legal Obligation: to comply with applicable law.

Sharing and Disclosure

Service Providers: we engage vendors for hosting, analytics, communications, and customer support. They process data under contract and only as instructed.

Integrations: when you connect external services (e.g., Google Calendar), we share the minimal data required to perform the requested actions.

Legal and Safety: we may disclose information to comply with law, respond to legal requests, or protect rights, safety, and security.

Business Transfers: in a merger, acquisition, or asset sale, data may be transferred in accordance with this Policy.

Data Retention

We retain information for as long as necessary to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and use case.

Security

We use administrative, technical, and organizational measures designed to protect information. No system is perfectly secure; please use strong, unique passwords and keep credentials safe.

International Data Transfers

Your information may be processed in countries with different data protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your data, and to data portability. You can exercise some rights via account settings, or contact us using the details below.

Children’s Privacy

The Services are not directed to children under the age of 13 (or as defined by local law). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us to request deletion.

Cookies and Preferences

We use cookies to keep you signed in, remember preferences, and analyze usage. You can manage cookies through your browser settings. Some features may not function without essential cookies.

Changes to This Policy

We may update this Policy from time to time. We will post the updated version with an updated “Last Updated” date and, when appropriate, provide additional notice.

Contact Us

If you have questions or requests, contact: privacy@vicstry.com. For certain jurisdictions, you may also have the right to lodge a complaint with a supervisory authority.