Privacy Policy
Last updated: April 8, 2026
Vorzal ('we', 'us', or 'our') operates an AI-powered business automation platform. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data.
1. Information We Collect
We collect information you provide directly when creating an account (name, email address via Google sign-in), business information you enter during onboarding, and content from conversations managed through our platform. When you connect your Google Business Profile, we collect and store OAuth access tokens and refresh tokens to act on your behalf, your business profile data including reviews and responses, and business name and location information. We also automatically collect usage data such as pages visited, features used, log data (IP address, browser type, timestamps), and cookies and similar tracking technologies.
2. How We Use Your Information
We use your information to provide, operate, and improve the Service, including managing automated responses to your customers and processing review management requests on your behalf. We also use it to send you important service notifications and updates, respond to your support requests, detect and prevent fraud or abuse, and comply with legal obligations. We do not sell your personal data to third parties. We do not use your data to train AI models without your explicit consent.
3. Google User Data
If you connect your Google Business Profile, Vorzal accesses your Google account data strictly to provide the features you requested. Specifically: • We access your Business Profile to read and respond to reviews on your behalf. • We store OAuth tokens securely in our database solely to maintain your authorized connection. • We do not share your Google data with any third party except as required to deliver the Service (e.g., our hosting infrastructure). • You can disconnect your Google Business Profile at any time from your account settings, which will immediately revoke our access. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Data Storage and Security
Your data is stored securely using Supabase, a cloud database platform with industry-standard security practices. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. OAuth tokens are stored server-side and are never exposed to the browser. While we take security seriously, no system is completely secure and we cannot guarantee absolute security.
5. Data Sharing
We do not sell, trade, or rent your personal information. We may share your data with trusted service providers who assist us in operating the Service (such as our database and hosting providers), who are contractually bound to keep your information confidential. We may also disclose your data if required by law, court order, or governmental authority, or to protect the rights, property, or safety of Vorzal, our users, or the public.
6. Cookies
We use cookies and similar technologies to maintain your login session, protect against CSRF attacks (via secure state cookies in our OAuth flows), and analyze usage patterns to improve the Service. You can configure your browser to refuse cookies, but this may prevent some features from working correctly.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain certain records. OAuth tokens are deleted immediately upon disconnecting a Google integration.
8. Your Rights
Depending on your location, you may have the right to access the personal data we hold about you, correct inaccurate data, request deletion of your data, object to or restrict our processing of your data, and receive a copy of your data in a portable format. To exercise these rights, contact us at comercial.vorzal@gmail.com. We will respond to your request within 30 days.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
11. SMS Communications
By providing your phone number and checking the SMS consent box on our contact form, you agree to receive SMS messages from Vorzal related to your inquiry and our services. Message and data rates may apply. Message frequency varies. Reply STOP at any time to unsubscribe. Reply HELP for help. We will not share your phone number with third parties for their marketing purposes.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: Email: comercial.vorzal@gmail.com WhatsApp: +57 319 719 7421