Privacy Policy

• The only personal information we actively collect through this website is what you give us when you ask for access: your name, company, work email, role, and an optional note.
• We use it to evaluate and respond to your request and to follow up with you. We never sell it.
• We don’t run advertising trackers or use tracking cookies. For basic traffic measurement we use a privacy-friendly, cookieless analytics service that counts aggregate visits without profiling you or tracking you across sites.
• We rely on a few standard third-party services (web hosting and a form/email service) that may receive limited technical data, such as your IP address, only to operate the Site, never to track or profile you. Fonts are served from our own site.
• You have rights over your data, including access and deletion, and you can reach us at privacy@vichaara.ai.

This Privacy Policy explains how Vichaara (“Vichaara,” “we,” “us,” or “our”) collects, uses, and shares personal information in connection with our website at vichaara.ai and its subdomains (the “Site”), together with our related communications and early-access program (the “Services”).

The Site is operated by Vichaara Inc., a Delaware corporation, with a place of business at 2504 NE 34th Avenue, Portland, OR 97212, United States.

Vichaara is a deterministic reasoning engine for high-stakes contract decisions. This policy covers the Site and our business communications. It does not govern the processing of any customer contract data through our product or API; that processing is governed by the separate written agreement (including any Data Processing Addendum) between Vichaara and the relevant customer. See Section 13 (Early-access and product data) below.

The Site does not offer a public account or login. The main ways to engage with us through the Site are to request access or to contact us using the details in Section 15. We may update this policy as our Services evolve.

(a) Information you provide to us. When you submit the request-access form, we collect:

• your name;
• your company or organization;
• your work email address;
• your role (selected from a list, for example CEO, CTO, CPO, Partnerships, Business Development, or Corporate Development); and
• an optional free-text note describing how you would use Vichaara.

We also collect any information you choose to include when you otherwise contact us, such as your message and your contact details.

Please do not include confidential, sensitive, or third-party personal information in the optional free-text field. A sentence or two about your use case is all we need.

(b) Information collected automatically. When you visit the Site, our hosting and infrastructure providers automatically receive and may log standard technical information sent by your browser, such as your IP address, browser type and settings, device and operating system, referring and exit pages, and the date and time of your request. We use this to operate, secure, and troubleshoot the Site.

The Site also stores a single display preference (light or dark theme) in your browser’s local storage. It stays on your device, is not used to track you, and is not transmitted to us.

(c) Cookies and tracking technologies. We do not use advertising cookies, analytics cookies, tracking pixels, session-replay tools, or third-party marketing services on this Site. For basic traffic measurement we use Vercel Web Analytics, a privacy-focused, cookieless analytics service provided by our hosting provider; it sets no cookies, does not store your IP address, uses no persistent identifier, and reports only aggregate data such as page views and visitor counts. It does not track you across other websites or over time. Because we do not track visitors across sites or over time, there is nothing for you to opt out of; for the same reason, we do not need to alter our behaviour in response to browser “Do Not Track” signals.

(d) Information from third parties. We do not buy personal information or build profiles from data brokers. If you reach us through a referral or a shared business contact, we may receive your business contact details from that source.

We use personal information to:

• evaluate and respond to your request for access, and administer our early-access program;
• communicate with you about Vichaara, including onboarding and any product updates you have asked to receive;
• operate, maintain, secure, and improve the Site;
• detect, prevent, and investigate fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our agreements.

Legal bases (EEA and UK). Where the EU or UK GDPR applies, we rely on: your consent (for example, optional marketing emails); our legitimate interests in assessing interest in our product, responding to you, and securing the Site (balanced against your rights and freedoms); taking steps at your request before entering into a contract; and compliance with legal obligations. You may withdraw consent at any time without affecting prior processing.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as follows:

• Service providers (processors). We use a small number of vendors to run the Site and handle access requests, including a web-hosting provider and a form-handling and email service that receives and routes your request-access submissions. They may process your information only on our instructions and under confidentiality and data-protection obligations.
• Legal and safety. We may disclose information where required by law or valid legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Vichaara, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will continue to protect it and will notify you of any material change to this policy.

To keep the Site fast and visually consistent, we use typefaces originally distributed through Fontshare and Google Fonts. The font files used by the Site are self-hosted and served from our own domain, so your browser does not contact Fontshare or Google just to render the Site.

• Fontshare-origin fonts. Some site fonts were originally obtained from Fontshare and are served locally by Vichaara.
• Google Fonts-origin fonts. Some site fonts were originally obtained from Google Fonts and are served locally by Vichaara.

We do not embed social-media widgets, chat tools, maps, video players, advertising scripts, or third-party hosted font loaders on the Site.

We keep request-access and contact information for as long as needed to evaluate your request, follow up with you, and maintain our relationship, and longer only where required for legal, tax, or recordkeeping purposes, or to resolve disputes. Server logs are kept for a short period for security and operations. We will delete your information sooner on request, as described in Section 10.

We maintain reasonable administrative, technical, and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, including encryption in transit (HTTPS) and limiting access to those who need it. However, no website or method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We are based in the United States, and the providers we use may process information in the United States and other countries. If you access the Site from the EEA, the UK, or elsewhere, your information may be transferred to and processed in countries whose data-protection laws differ from those in your jurisdiction. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum).

Depending on where you live, you may have some or all of the following rights:

• Access a copy of the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Object to or restrict certain processing, and withdraw consent;
• Portability of the information you provided; and
• Complain to your local data-protection authority.

EEA and UK (GDPR). You have the rights above and may lodge a complaint with your supervisory authority, though we would appreciate the chance to address your concern first.

California (CCPA/CPRA). California residents have the right to know the categories and specific pieces of personal information we collect, the sources, and the purposes; to request deletion and correction; and not to be discriminated against for exercising these rights. In the preceding 12 months we have collected the categories identifiers (name, email) and professional or employment information (company, role), together with any details you include in a message, for the business purposes described in this policy. We have not sold or “shared” (as those terms are defined by the CCPA) personal information, and we do not knowingly do so. We do not collect “sensitive personal information” as defined by the CPRA.

How to exercise your rights. Email us at privacy@vichaara.ai or use the contact options in Section 15. We will verify your request and respond within the time required by applicable law. Where the law permits, you may use an authorized agent.

The Site and Services are intended for businesses and professionals and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

The Site may reference or link to third-party websites and platforms (for example, partner or integration logos). We are not responsible for the privacy practices of those third parties; please review their policies before providing information.

Any processing of contract or other content through the Vichaara product or API is governed by the separate written agreement between you (or your organization) and Vichaara, including any Data Processing Addendum, which defines each party’s role. You determine the purposes of that processing and remain the controller (and the business, under U.S. state privacy laws) for your data. Where the Vichaara software runs inside your own environment and we do not access, receive, or store your data, we act as a technology provider, not a processor; only where we actually process personal data on your behalf do we act as a processor / service provider, on your documented instructions. Nothing in this Site policy overrides those terms.

We may update this policy from time to time. We will post the revised version here with a new “Last updated” date and, for material changes, take additional steps where required (such as notifying you by email). Your continued use of the Site after an update means you accept the revised policy.

For questions, requests, or complaints about this policy or your personal information:

You can also reach us through the request-access form on the Site.