Welcome to Vextorix ("we", "us", or "our"). Vextorix is a software engineering and artificial intelligence company providing custom software development, AI automation workflows, systems integration, and technological consulting services to individuals and businesses (collectively, the "Services").
This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you visit our website (vextorix.com), engage our professional services, communicate with our engineering team, or interact with applications operated by Vextorix.
Please review this Privacy Policy carefully. By accessing our website, communicating with us, or engaging our Services, you acknowledge that you have read and understood the practices described herein.
1. Personal Information We Collect
We collect personal information that identifies, relates to, or can reasonably be linked with you or your organization. We collect information in the following categories:
- Contact Details: Your name, professional email address, phone number, organization name, and country/city of residence when you reach out for inquiries, technical consultations, or project quotes.
- Project & Technical Requirements: Technical specifications, business workflows, architecture preferences, API documentation, and communication records necessary to design, develop, and deploy software solutions for you.
- Billing & Corporate Information: Invoicing details, corporate tax identifiers (such as NIT / RUT in Colombia or regional equivalents), bank transfer receipts, and payment confirmations. Payments are processed through regulated banking and electronic payment institutions; we do not store full payment card numbers on our servers.
- Technical & Device Data: Standard server logs, IP address, browser type, operating system, and navigation patterns on our static website to maintain security and operational reliability.
- Authorized Integration Credentials: When you contract us to integrate with your accounts (e.g., Google Workspace, social media APIs, cloud platforms), we receive only the authorized tokens and API permissions required to perform the requested development work.
2. Sources of Personal Information
We obtain personal information through:
- Direct Interactions: When you email us at support@vextorix.com, message us via telephone/WhatsApp, or enter into a service agreement with our team.
- Automated Website Technologies: Basic HTTP logging and secure session headers when you browse vextorix.com.
- Authorized Third-Party APIs: Information accessed through authorized OAuth scopes when you explicitly connect external platforms to tools developed or operated by Vextorix.
3. How We Use Your Personal Information
We use personal information strictly for legitimate commercial and engineering purposes, including:
- Delivering Professional Services: Developing, testing, deploying, and maintaining bespoke software, AI assistants, automation scripts, and systems integrations.
- Client Communication: Responding to technical questions, providing quotes, delivering milestone updates, and providing ongoing support.
- Confidentiality & Security: Protecting system integrity, preventing fraud, managing access controls, and securing client proprietary information.
- Legal & Accounting Compliance: Fulfilling statutory tax reporting, invoicing requirements, and complying with applicable laws and court orders.
Our Privacy Commitment
We do NOT sell, rent, or trade personal information to data brokers or third parties. We never use client proprietary data or private documents to train public or foundation artificial intelligence models.
4. Disclosure of Personal Information
We do not disclose your personal information except in the following limited circumstances:
- Infrastructure & Service Providers: Trusted cloud infrastructure, secure email hosting, and development tooling providers who assist in operating our technical services under strict non-disclosure obligations.
- Client-Directed Integrations: When you direct us to deploy code or connect APIs to third-party services chosen by you (e.g., Google Cloud, TikTok API, cloud hosting environments).
- Legal Obligations: When required to comply with valid legal processes, governmental regulations, or court orders under applicable law.
- Corporate Transactions: In connection with any merger, sale of company assets, or restructuring, subject to equivalent confidentiality safeguards.
5. Data Security and Retention
We employ robust technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. Access to client source code and project data is strictly restricted to authorized engineering personnel.
We retain personal information only for the duration necessary to satisfy the purposes described in this Privacy Policy, provide ongoing maintenance and warranty obligations, resolve disputes, and comply with legal, tax, and accounting retention requirements.
6. Your Privacy Rights
Depending on your jurisdiction (including Colombia under Statutory Law 1581 of 2012 / Habeas Data, the European Union under GDPR, and other international frameworks), you may have rights regarding your personal information, including:
- Access: The right to request confirmation of whether we process your personal data and to obtain a copy thereof.
- Correction & Updating: The right to request correction of inaccurate, incomplete, or outdated personal data.
- Deletion: The right to request the deletion or erasure of your personal data where retention is no longer legally required.
- Revocation of Consent: The right to withdraw consent previously granted for specific data processing activities.
To exercise any of these rights, please send your written request to support@vextorix.com. We will process and respond to your request in accordance with applicable legal timeframes.
7. Children's Privacy
Our Services are strictly directed to professionals, business owners, and adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided us with personal information, please contact us for prompt removal.
8. International Data Transfers
Because our engineering operations, cloud servers, and third-party APIs operate globally, information collected may be processed and stored in countries outside your country of residence. Where transfers occur, we implement recognized contractual and technical safeguards to ensure adequate data protection.
9. Specific Application Integrations
ATHENA-Kernel (TikTok integration)
ATHENA-Kernel is a personal desktop application operated by Vextorix that creates original short videos and publishes them to the TikTok account of its owner after the owner authorizes it through TikTok Login Kit.
Information we access: When the account owner connects TikTok, we receive an access token and basic profile information (open ID, display name and avatar) through the TikTok API, with the scopes user.info.basic, video.upload and video.publish. We use this information only to show which account is connected, to upload videos created by the owner's assistant and to publish them to the owner's own profile.
What we do not do: We do not access, collect or store data from other TikTok users, we do not read messages, followers or private content, and we do not sell or share TikTok data with third parties or use it for advertising.
Storage and security: Access tokens are stored only on the owner's own computer and are used solely to call the TikTok API on the owner's behalf. They are refreshed through TikTok's official OAuth flow.
Your choices: The owner can disconnect ATHENA-Kernel at any time from TikTok (Settings and privacy → Security → Manage app permissions) or by deleting the local token. To request deletion of any information related to this integration, contact us at support@vextorix.com.
ATHENA-Kernel (Google integration)
ATHENA-Kernel accesses the Google account of its owner (support@vextorix.com) only after the owner authorizes it through Google OAuth, using Google Drive (to store and read the owner's own media library), Gmail (to read messages, organize them and prepare drafts that are sent only when the owner confirms) and Google Calendar (to read and create the owner's events).
Google API Services User Data Policy:
ATHENA-Kernel's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide these features to the owner; it is not sold, not used for advertising, not shared with third parties and not used to train AI models. Access tokens are stored only on the owner's computer, and the owner can revoke access at any time at https://myaccount.google.com/permissions. Contact: support@vextorix.com.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, technical, or legal changes. Any revisions will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
11. Contact Information
If you have questions, comments, or requests regarding this Privacy Policy or our privacy practices, please contact our legal and support team:
Vextorix
Email: support@vextorix.com
Phone: +57 304 3828187
Address: Cra. 31 #51-74, Sotomayor, Bucaramanga, Santander, 680003, Colombia