Privacy Policy for Caldera by Vec4 LLC
Effective Date: 4/1/2024
Vec4 LLC ("we," "us," or "our") welcomes you to Caldera, our innovative product designed to revolutionize the way you handle and analyze documents. This Privacy Policy outlines our practices regarding the workspace, use, and disclosure of your information when you use Caldera and informs you of your privacy rights.
1. Information Workspace and Use
To provide and enhance Caldera, we collect personal information that you voluntarily provide to us. The types of personal information we collect include:
- User Identity Information: We collect your name to create and manage your user account. We store your name in our PostgreSQL database, keyed by your Clerk user token ID.
- Document Data: When you upload documents to Caldera, we process this content using OpenAI’s embedding service to transform your documents into vector representations. These vectors, along with chunks of your document data, are stored in a vector database to enable vector similarity searches.
2. Data Processing and Sharing
- Vector Embedding and Database: Your documents are embedded and stored securely for the purpose of providing Caldera’s functionality, including vector similarity search and analysis via ChatGPT.
- Service Providers: We engage third-party service providers, including Clerk for authentication services, to facilitate the operation of Caldera. These providers have access to your information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.
3. Data Security
We are committed to protecting the security of your personal information. We implement industry-standard security measures to prevent unauthorized access, disclosure, alteration, or destruction of your information. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.
When dealing with any user data, we use industry-standard encryption practices to keep that data safe.
Data in transit
All user document data is encrypted when it is being transmitted between Caldera and its Vector Database. SSL/TLS certificates shield data using 256-byte signatures and either 2048-bit or 4096-bit keys. All connections to Content Delivery Network (CDN) servers and the database layer are secured using TLSv1.3. All TLS/SSL keys for client-to-server communication are changed annually.
Data at rest
When at rest, all user documents are encrypted at multiple different levels. Auth tokens are stored using pbkdf2, bcrypt, scrypt, or argon2 hashing algorithms.
4. International Data Transfers
Caldera is currently not available to users in the European Union (EU). We plan to support EU General Data Protection Regulation (GDPR) compliance in the future to extend Caldera’s availability to European users.
5. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will indicate the effective date of the latest version at the top of the Privacy Policy.
6. Google Workspace Data Use and Protection
In utilizing Google Workspace APIs, Vec4 LLC is committed to ensuring the privacy and security of user data obtained through these services. Our application, Caldera, strictly adheres to the following principles regarding Google Workspace data: Data Retention and Deletion: We retain Google Workspace data only for as long as necessary to provide the functionalities of Caldera to our users. Users have the right to request the deletion of their data from our systems, which we will execute promptly, adhering to our data retention policy.
7. Prohibition on AI/ML Training:
We explicitly affirm that no user data obtained through Google Workspace APIs or manual uploads will be used to develop, improve, or train generalized AI and/or machine learning (ML) models.
Contact Us
If you have any questions or concerns about our Privacy Policy or your data privacy, please contact us at:
Vec4 LLC
privacy@vec4.io
By using Caldera, you consent to the workspace, use, and sharing of your information as described in this Privacy Policy.