Privacy Policy

Version: 1.0 Effective Date: August 1, 2026 Status: Active

This document is part of the VesEvi Version 1.0 legal documentation package, effective August 1, 2026, and reflects the VesEvi platform as implemented, using docs/platform/VesEvi-Version-1-Product-Book.md as the source of truth for product capability, and Security-and-Privacy.md and Evidence-Retention.md for detailed technical grounding. It uses conservative, industry-standard language appropriate for an early-stage software company; as with any company's policies, periodic legal review is expected as VesEvi grows, and future revisions will be published as Version 1.1, Version 2.0, and so on.

1. Introduction

This Privacy Policy explains what information VesEvi collects, how it is used, when it may be shared, and the choices available to you. It applies to your use of the VesEvi Mobile app, Web portal, and related backend services (together, "the Service").

2. Information We Collect

2.1 Account Information

When you register, we collect information such as your name, email address, and password (stored using industry-standard hashing, never in plain text). If you join or create a Business workspace, we also associate your account with that organization and your role within it.

2.2 Inspection Data

We collect the information you enter to create and complete inspections: asset details (such as vehicle or property identifiers), inspection type, notes, location fields associated with the inspection, and timestamps you or the Service record during capture.

2.3 Evidence

We collect the video and photo evidence you capture during an inspection, and the frames extracted from that video for analysis. See the Evidence Integrity Policy for how this evidence is handled.

2.4 Media Metadata

We collect metadata associated with captured media, such as capture zone/angle, upload status, and file characteristics necessary to process and display your evidence.

2.5 Device Information

The Mobile app and Web portal may collect basic device and client information (such as device or browser type and operating system version) as necessary to operate the Service reliably and diagnose problems.

2.6 Location

Some inspection workflows are designed to associate a location with an inspection as part of establishing where evidence was captured. Location associated with an individual inspection record is handled as part of that inspection's data and is subject to the same visibility and sharing rules as the rest of the inspection (Section 5). Separately, the Worldwide History consent process itself does not collect additional device location data beyond what you provide.

2.7 Analytics

As of this Policy's effective date, VesEvi's backend does not integrate third-party analytics or advertising-tracking services beyond what is operationally necessary to run the Service (such as basic server logging for reliability and security). If this changes, we will update this Policy before any such collection begins.

2.8 Cookies (Web)

The Web portal uses session-related cookies or comparable local storage mechanisms that are necessary to keep you signed in and to maintain your session securely. VesEvi does not currently use advertising or cross-site tracking cookies.

3. How We Use Information

We use the information described above to: provide and operate the Service, including creating and displaying your inspections, assets, and reports; authenticate you and enforce authorization and workspace boundaries; run AI-assisted analysis on evidence you submit; generate comparisons and reports you request; operate the optional Worldwide History feature, if and only if you choose to participate; maintain the security and integrity of the Service; and communicate with you about your account or the Service.

We do not sell your personal information.

4. Sharing

We share information as follows:

• Within your workspace: other members of a Business workspace you belong to may see inspections, assets, and evidence according to their role and the applicable visibility settings.
• Service providers: we may use third-party infrastructure providers (such as cloud hosting and storage providers) to operate the Service, under confidentiality and data-processing terms.
• Legal requirements: we may disclose information where required by law, legal process, or to protect the rights, property, or safety of VesEvi, our users, or the public.
• Worldwide History: described in detail in Section 5 below — sharing to Worldwide History only occurs with your explicit, separate consent for a specific inspection.
• Business transfers: if VesEvi is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy or a successor policy.

5. Worldwide History

Worldwide History is a separate, opt-in feature. If you choose to share an inspection to Worldwide History, you will be shown a consent statement and, before publication, a preview of exactly what will be made public. The published record is built from an allowlist of asset-condition information — such as asset type, general category (for vehicles: year/make/model; for properties: property type and city/state/country, never an exact address), approved photos with metadata stripped, and their approved findings.

The published record does not include your name, contact information, company identity, exact address, vehicle identification number, license plate, serial number, or original inspection notes. Free-text content is screened before any publication and, where flagged, is withheld and routed to human review rather than made public. Video is not currently supported in Worldwide History; only still images may be shared. Worldwide History does not use pixel-level redaction (such as automated face or license-plate blurring) — the safeguards described above (screening, redaction to an allowlist, no notes, no video) are the operative protections. See the Worldwide History Policy for full detail.

You may withdraw a shared record at any time. Withdrawal removes it from public visibility immediately; the underlying record is retained internally rather than deleted, and may become visible again only if you actively re-share it or a moderator reactivates a withdrawn record.

6. Retention

We retain your information for as long as your account is active and as needed to provide the Service. Different categories of data have different retention characteristics; see the Data Retention Policy for detail, including source video retention windows, durable evidence-image retention for confirmed findings, and permanent retention of finding metadata and generated reports where report storage is enabled.

7. Security

We use administrative, technical, and organizational measures designed to protect your information, including encrypted password storage, authenticated and authorized access to your data, and access controls that scope visibility to your workspace unless you separately choose to share more broadly. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. See Security-and-Privacy.md for the platform's detailed security model.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at Info@vespaan.com. Some information, including previously published Worldwide History records you consented to share, and certain records we are required to retain for legal, security, or evidentiary-integrity reasons, may not be immediately deletable in full — see the Data Retention Policy for how deletion requests are handled and their known exceptions.

9. Children

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at Info@vespaan.com so we can address it.

10. International Users

Vespaan Corporation is based in the United States, and the Service is primarily operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws different from those in your jurisdiction. Where applicable law requires a specific safeguard for such a transfer, we rely on appropriate mechanisms recognized under that law, such as standard contractual clauses or an equivalent transfer mechanism.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will provide reasonable notice before they take effect.

12. Contact

Questions about this Privacy Policy may be directed to:

Vespaan Corporation Email: Info@vespaan.com

This document must remain consistent with the Terms of Service, Worldwide History Policy, Data Retention Policy, Evidence Integrity Policy, and AI Transparency and Disclosure, all part of the same VesEvi Version 1.0 legal package.