1. Introduction
Decompressed ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vector storage platform and services.
2. Information We Collect
Account Information
When you create an account, we collect your email address, name, and authentication credentials. We use Supabase for authentication and secure credential storage.
Usage Data
We collect information about how you interact with our services, including API calls, storage usage, connector configurations, and search queries. This data helps us improve our services and provide accurate billing.
Vector Data
When you sync vectors from Pinecone, Qdrant, or AWS OpenSearch, we store compressed versions of your vector embeddings. We do not access or analyze the semantic content of your vectors.
3. How We Use Your Information
- Provide, maintain, and improve our vector storage services
- Process and compress your vector data
- Monitor usage for billing and quota management
- Communicate with you about service updates and support
- Detect and prevent fraud or security issues
- Comply with legal obligations
4. Data Storage and Security
Your data is stored on AWS infrastructure with encryption at rest using AES-256. Data in transit is encrypted using TLS 1.3. We implement industry-standard security measures including:
- Role-based access control (RBAC)
- API key authentication with rate limiting
- Regular security audits and penetration testing
- Automated backups with point-in-time recovery
5. Data Sharing and Disclosure
We do not sell your personal information or vector data. We may share information only in the following circumstances:
- Service Providers: AWS for infrastructure, Supabase for authentication
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal information and vector data within 30 days, except where we are required to retain it for legal purposes.
7. Your Rights
Depending on your location, you may have the following rights:
- Access your personal information
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Opt-out of marketing communications
8. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use third-party tracking or advertising cookies.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
10. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
privacy@decompressed.io