Privacy Policy

This Privacy Policy explains how VectorViewer, LLC ("VectorViewer," "we," "us") handles personal information. It covers our website at vectorviewer.com (the "Site") and, in Section 4, how we treat the data that customers process in the VectorViewer suite of products (VectorViewer, VectorForms, VectorGen, VectorCLM, VectorSign, and VectorFlow).

1. Summary

• Website visitors: we collect the contact details you give us and basic technical data, and we use them to respond to you and run the Site.
• Enterprise customers: VectorViewer is usually licensed and installed inside the customer's own cloud account. In that setup the customer's documents and data stay in the customer's environment, and we do not host, store, or have routine access to them.
• Hosted (SaaS) customers: we can host a limited number of smaller customers in our own environment. In that case we process their data only on their behalf and under their agreement with us.
• We do not sell personal information.

2. Information we collect through the Site

Information you provide

• Contact details and message content when you use the Contact Us form or reach out to us (name, email, phone number, company, and what you write to us).
• Details you provide when you book a demo, which is handled by our scheduling provider (see Section 5).

Information collected automatically

• Technical data such as IP address, browser and device type, pages visited, referring page, and timestamps.
• Cookie and analytics data, as described in Section 6.

3. How we use Site information

• To respond to inquiries and provide demos, quotes, and support.
• To operate, secure, and improve the Site and our products.
• To understand how the Site is used, using aggregated or analytics data.
• To send you information you asked for. We do not send marketing email to people who have opted out.
• To meet legal obligations and to protect our rights, our customers, and the Site.

4. Customer data in the VectorViewer products

"Customer data" means documents, form entries, contracts, signatures, and other content that a customer or its users upload to or create in the products. Customer data is governed by the customer's agreement with us, and the customer controls it. This Policy does not change those agreements.

Private cloud and on-premise deployments

For most enterprise customers, we license the software and the customer installs and runs it in its own cloud account or data center. The customer chooses the region, controls access and retention, and applies its own security and compliance policies. After installation, customer data resides in the customer's environment. We do not collect, host, or process it, and we only see it if the customer chooses to share specific material with us, for example to troubleshoot an issue. We handle anything shared that way only for that purpose and delete it when it is no longer needed.

Hosted (SaaS) deployments

If we host a customer in our own environment, we act as the customer's service provider (a "processor"). We process customer data only to provide, secure, and support the service as instructed in the customer's agreement. We do not sell customer data, and we do not use it for advertising. We apply access controls so that each customer's data is separated from other customers' data, and we limit our staff's access to what is needed to run and support the service.

AI Assistant

The viewer includes an optional AI Assistant that answers questions about, and can suggest annotations for, the document a user has open. It acts only on the document and the request the user provides. AI requests are processed using Amazon Bedrock, a service of Amazon Web Services (AWS). In a private cloud deployment installed in a customer's own cloud, AI requests go to Amazon Bedrock in the customer's own AWS account. We do not use customer content to train AI models. AI responses can be inaccurate, and users should check them against the document.

Requests about customer data

If you are an end user of one of our customers and want to access, correct, or delete your data, please contact that customer, because it controls the data. If you contact us, we will direct your request to the right customer.

5. How we share information

We do not sell personal information. We share Site information only with:

• Service providers that help us run the Site and our business, such as website hosting and content delivery, analytics (Google), email, and scheduling (we use Calendly for demo bookings) and video (our promo video is served by YouTube only after you click play). They may use the information only to provide services to us.
• Amazon Web Services, which provides cloud infrastructure for our hosted deployments and processes AI Assistant requests through Amazon Bedrock for those deployments. In private cloud deployments, the customer's own AWS account handles these requests and we are not involved.
• Professional advisers such as lawyers, accountants, and insurers, where needed.
• Authorities and other parties where required by law or to protect rights and safety.
• A successor if VectorViewer is involved in a merger, acquisition, or sale of assets. We will protect your information under terms no less protective than this Policy.

For hosted customers, a current list of subprocessors is available on request.

6. Cookies and analytics

With your consent, the Site uses Google Analytics 4, a web analytics service provided by Google, to understand how visitors use the Site, such as which pages are viewed and how visitors arrive. Google Analytics sets cookies (for example, cookies beginning "_ga") and collects data such as pages viewed, approximate location derived from IP address, browser and device type, and referral source. Google Analytics 4 does not log or store full IP addresses. Google processes this data on our behalf and under its own terms, which you can read atpolicies.google.com/technologies/partner-sites. We do not use this data for advertising. Google Analytics does not load and sets no cookies until you click Accept on our cookie banner. You can change your choice at any time using "Cookie Settings" in the footer.

You can also opt out of Google Analytics by installing theGoogle Analytics opt-out browser add-on, or by blocking or deleting cookies in your browser settings. Some Site features may not work if you block all cookies.

Our promo video loads from YouTube's privacy-enhanced mode only after you click play, and Calendly's own policies apply once you open its booking page.

7. Data retention

• Inquiry and contact data: kept as long as needed to respond and for a reasonable period afterward for our business records, then deleted or anonymized.
• Site logs and analytics: kept for a limited period needed for security and analysis.
• Customer data: in private cloud deployments, retained by the customer in its own environment. In hosted deployments, retained according to the customer's agreement and deleted within a reasonable period after the agreement ends, unless the law requires us to keep it.

8. Security

We maintain administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, or destruction, including access controls, encryption of data in transit, and limiting access to those who need it. No system is perfectly secure. We do not currently hold a third-party security certification such as SOC 2. Customers can ask us about our security practices through the contact details below, and a private cloud deployment also benefits from the customer's own security controls. If we become aware of a breach affecting customer data we process, we will notify the affected customer as required by law and by our agreement with them.

9. Your privacy rights

Depending on where you live, including under laws in the United States such as the New Jersey Data Privacy Act and the California Consumer Privacy Act, and under the EU and UK GDPR, you may have the right to:

• know what personal information we hold about you and get a copy;
• correct or delete it;
• object to or restrict certain uses, and opt out of targeted advertising, sales, or sharing of personal information (we do not sell or share personal information);
• withdraw consent where we rely on it; and
• not be treated unfairly for using these rights.

To make a request, email privacy@vectorviewer.com or use ourContact Us page. We may need to verify your identity, and we will respond within the time required by law (generally 30 to 45 days). If we decline a request, you can appeal by replying to our response, and you can also contact your local data protection authority.

10. Where information is processed

VectorViewer, LLC is based in the United States, and Site information may be processed in the United States and in other countries where our service providers operate. Where we transfer personal information from the EU, UK, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses. Customer data in a private cloud deployment stays in the region the customer chooses.

11. Children's privacy

The Site and our products are intended for business use and are not directed to children under 16. We do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date. For material changes, we will give additional notice where the law requires it.

13. Contact us

VectorViewer, LLC
532 Old Marlton Pike W, #520
Marlton, NJ 08053
Email: privacy@vectorviewer.com
Or use our Contact Us page.