Privacy Policy
Last updated: 5 August 2026
This Privacy Policy explains how Veevra Technologies, LLC (“Veevra,” “we”) collects, uses, and protects information in connection with V360 (the “Service”). V360 is a private, personal Digital Twin, and protecting your information is central to how it is built.
The short version
- Your Twin is built from your own documents and the accounts you choose to connect.
- Your content is yours alone. The Service is designed so that our staff and administrators cannot read it.
- We never sell your data or use it to train shared AI models.
- You can export or delete everything at any time from your account.
1. Information we collect
- Account information: your name, email address, and authentication details needed to create and secure your account.
- Your Content: documents you upload, and the data from third-party accounts you connect (such as email, calendar events, files, contacts, and messages). Your Twin reads only the accounts you connect, and only to serve you.
- Billing information: when you subscribe, our payment provider (Stripe) collects your payment details. We do not store your full card number; we keep only a customer/subscription reference and status.
- Usage and device data: limited technical information needed to operate and secure the Service (for example, log and diagnostic data).
2. How connected accounts work
You connect third-party accounts using delegated sign-in (OAuth) on the provider’s own screen. This means V360 never sees your password. You can disconnect any account at any time, which stops further access. Your use of each provider remains subject to that provider’s own terms and privacy policy.
Google user data and Limited Use
When you connect a Google account, V360 requests only read-only or narrowly-scoped access to the data below, on Google’s own consent screen, and uses it solely to provide features back to you — the same user who granted access. Google user data is never sold, never used for advertising, and never used to train generalized or third-party AI/ML models.
- Calendar (calendar.readonly) — reads your calendar to give lead-time reminders, surface conflicts, and answer “what’s on my day.” V360 never creates or changes events.
- Contacts (contacts.readonly) — reads your contacts to resolve who the people in your calendar and messages are, so reminders and context are correctly attributed. V360 never edits contacts.
- Drive (drive.file) — V360 can access only the specific files you select with Google’s file picker; it cannot see any other file in your Drive. Used to answer questions and extract facts such as dates, amounts, and parties. V360 never creates, edits, or deletes files.
- Identity (openid, email, profile) — used only to sign you in and show your name and email in-app.
You can disconnect at any time from Settings → Connections, which revokesV360’s access and deletes derived data. Google user data is processed only by the infrastructure and AI-processing sub-processors strictly required to operate the Service, under confidentiality, and is stored encrypted and isolated per user.
Limited Use. V360’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the data only to provide and improve user-facing features within V360 for the user who granted access; we do not transfer or sell the data; we do not use it for advertising; and we do not allow humans to read the data except (a) with the user’s explicit consent, (b) for security purposes such as investigating abuse, or (c) as required by applicable law.
3. How we use information
- To operate your Twin: to store, organize, summarize, search, and act on your information for you.
- To provide, secure, maintain, and improve the Service.
- To process payments and manage your subscription.
- To communicate with you about your account and the Service.
- To comply with law and prevent abuse.
We do not sell your personal information, and we do not use Your Content to train shared or third-party AI models.
4. Confidentiality: your content is yours alone
The Service is designed with a strict content firewall: your content is operator-inaccessible. Our employees and administrators cannot read the documents, messages, or data your Twin holds, and access is not available through administrative or support tools. Your Twin works for you and reports to no one else.
5. AI processing
To provide features like summaries and answers, your content is processed by AI systems operated for the Service. On eligible plans you may connect your own AI provider (“bring your own AI”), in which case requests you route to that provider are subject to its terms. In all cases, processing is performed to serve you and not to train shared models.
6. Service providers we share with
We share information only with providers that help us run the Service, under confidentiality obligations:
- Stripe: payment processing and subscription management.
- Infrastructure and AI-processing providers: hosting and the computation that powers your Twin.
- Providers you connect: the third-party accounts you authorize (your own services).
We may also disclose information if required by law, or to protect rights, safety, and the integrity of the Service.
7. Security
We protect your information with technical and organizational measures, including encryption of sensitive data, access controls, and the content-firewall design described above. No system is perfectly secure, but security is a primary design goal of the Service.
8. Retention
We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or your account, we delete the associated data, except limited records we must retain for legal, security, or accounting purposes (for example, billing records).
9. Your rights and choices
- Access, export, and delete: you can export or delete your data at any time from your account.
- Disconnect: you can disconnect any connected account at any time.
- Depending on where you live (for example, the EEA/UK or California), you may have additional rights to access, correct, delete, or restrict processing of your personal information, and to object or lodge a complaint. Contact us to exercise these rights.
10. International users
We are based in the United States, and your information may be processed there and in other countries where we or our providers operate. We take steps to protect your information consistent with this Policy wherever it is processed.
11. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information.
12. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will provide notice (for example, in-app or by email). The “Last updated” date above reflects the current version.
13. Contact
Questions or requests about your privacy? Email support@veevra.com.