Privacy Policy

1) Scope

This Privacy Policy explains how Vejaro Inc. collects, uses, discloses, and protects personal information when you use our websites, applications, platforms, and services (collectively, the “Services”). This includes our software-as-a-service products and, where applicable, telecommunications or messaging services (e.g., voice, SMS/MMS, SIP/VoIP, call routing, messaging, and related features).

Where we process personal information on behalf of a business customer (for example, when our customer uses our platform to communicate with their end-users), that customer may be the “controller” (or equivalent) of that information. In those cases, our handling of the information is governed by our contract with that customer, and you should direct requests to the customer first.

2) Definitions

• Personal information means information about an identifiable individual (alone or combined with other information).
• Account data means details you provide to create or administer an account (e.g., name, email, role, organization).
• Service data means content and data processed to provide the Services (e.g., messages, call logs, configurations) depending on features used.
• Usage data means technical and operational data about how the Services are used (e.g., events, device, browser, IP, diagnostics).

3) Personal Information We Collect

3.1 Information you provide

• Identity & contact: name, email, phone number, job title, company, mailing/billing address.
• Account credentials: login identifiers, authentication factors (we do not store plaintext passwords).
• Billing: payment method details and billing contacts (payment data may be handled by payment processors).
• Support: information you send to support (tickets, emails, call recordings if enabled, attachments, logs).
• Customer content: content you or your users create or upload (templates, documents, messages, media) depending on features used.

3.2 Information we collect automatically

• Device & network: IP address, device identifiers, operating system, browser type, language, approximate location inferred from IP.
• Usage & diagnostics: feature usage, clicks/events, performance metrics, crash logs, and security logs.
• Cookies/SDKs: cookies, local storage, pixels, or similar technologies (see Cookies & Analytics).

3.3 Telecommunications/service metadata (if you use telecom features)

If you use our telecommunications or messaging features, we may process service metadata such as: call detail records (e.g., timestamps, duration, direction), routing information, delivery status, and related identifiers. Depending on configuration, we may also process message content or media (e.g., SMS/MMS) and recordings (if enabled).

3.4 Information from third parties

• Vendors: payment processors, identity providers, fraud-prevention services, analytics providers.
• Partners/carriers: telecom carriers or interconnection partners may provide delivery, routing, and status information.
• Business customers: our customers may provide end-user contact details and other information for service delivery.

4) How We Use Personal Information

We use personal information for purposes consistent with providing and improving the Services, and as permitted or required by applicable law. These purposes align to recognized privacy principles (including accountability, identifying purposes, consent, limiting collection/use, safeguards, openness, and access).

Purpose	Examples
Provide the Services	Provision accounts, route calls/messages, deliver features, process communications, render templates, store configurations.
Security & fraud prevention	Authenticate users, prevent abuse, detect attacks, audit access, investigate suspicious activity.
Support & operations	Respond to tickets, troubleshoot issues, maintain reliability, perform backups and incident response.
Billing & administration	Invoices, payments, subscription management, usage-based billing, account notices.
Improve & develop	Analytics, feature development, performance tuning, aggregated reporting.
Legal & compliance	Meet legal obligations, respond to lawful requests, enforce terms, handle disputes.

5) Consent & Your Choices

We obtain consent where required by law and provide choices where feasible. Consent may be express or implied depending on context. You may withdraw consent, subject to legal/contractual restrictions and reasonable notice. Withdrawing consent may limit our ability to provide the Services.

• Account controls: You can update certain account/profile information within the Services.
• Marketing controls: You can unsubscribe from marketing (see Email/SMS & CASL).
• Cookies: You can manage cookie preferences via your browser and (if provided) our cookie banner/settings.

6) When We Share Personal Information

We do not sell personal information. We may share personal information in the following circumstances:

• Service providers: vendors who help us deliver the Services (hosting, analytics, support tools, email delivery, payments), under contractual confidentiality and security obligations.
• Telecom/carrier partners: to route communications and provide delivery/status and interconnection services.
• Business customers: where your organization administers your account or where our customer is the primary relationship holder.
• Legal reasons: to comply with law, regulation, court order, or lawful request; to protect rights, safety, and security; to investigate fraud or abuse.
• Business transactions: in connection with a merger, financing, acquisition, or sale (subject to appropriate protections).

7) Cross-Border Processing

We may store or process personal information in Canada and/or other jurisdictions where we or our service providers operate. Laws in those jurisdictions may differ from Canadian laws, and foreign authorities may have lawful access to information. We use safeguards designed to protect information regardless of location.

8) Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information. Safeguards may include: access controls, least-privilege permissions, encryption in transit, encryption at rest where appropriate, monitoring, and secure development practices. No method of transmission or storage is 100% secure; therefore, we cannot guarantee absolute security.

9) Retention

We retain personal information only as long as needed for the purposes described in this Policy, to provide the Services, to meet legal/accounting requirements, and to resolve disputes or enforce agreements. Retention periods vary based on data type, contract terms, and legal obligations.

10) Access, Correction, & Complaints

You may request access to your personal information and request corrections where appropriate. We may need to verify your identity. In some cases, access may be limited as permitted by law.

If you have concerns, you may contact us first so we can try to resolve the issue. Depending on your circumstances, you may also have the right to complain to a privacy regulator.

11) Cookies & Analytics

We use cookies and similar technologies to operate our website and Services, remember preferences, maintain sessions, prevent fraud, and understand usage. You can control cookies via browser settings; disabling cookies may affect functionality.

Typical categories:

• Strictly necessary (security, login sessions)
• Functional (preferences)
• Analytics (usage measurement, performance)

12) Email/SMS & CASL

Where we send commercial electronic messages (email or SMS) subject to Canada’s Anti-Spam Legislation (CASL), we will provide required identification information and an unsubscribe mechanism, and we will respect unsubscribe requests within the time required by law.

Note: Our business customers may send messages using our platform. In those cases, the customer is typically responsible for obtaining required consents and providing required disclosures in their messages.

13) Telecommunications-Specific Notice

If you use telecom features, you understand that service delivery may require processing of routing information and service metadata (e.g., call/message status and delivery data). We treat customer information as confidential and limit access on a need-to-know basis, using safeguards consistent with the sensitivity of telecom data.

14) Children’s Privacy

Our Services are intended for business use and are not directed to children under the age of 13. If you believe a child has provided personal information to us without appropriate consent, contact us and we will take reasonable steps to address the issue.

15) Updates to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated Policy and update the “Last updated” date above. Where appropriate, we may provide additional notice (e.g., in-app notification).

16) Contact Us