Privacy Policy

VanillaGreen LLC is a Washington limited liability company and is responsible for the information described in this policy. Email is how we take privacy questions and requests: write to contact@vanillagreen.com.

• Analytics. Vercel Analytics records page views, referring page, country, and broad device and browser type. It does not set advertising cookies and does not build a profile of you across other sites.
• Contact-form submissions. The name, email address, and message you type, plus the time we received them.
• Server logs. Our host keeps request logs with IP address, user agent, and requested URL for security and debugging. Talk logs also include the caller's GitHub login, call and request identifiers, status, and timing information.
• Staff sign-in. GitHub provides your login, avatar, organization membership role, and profile name and email address where available. An encrypted session cookie holds these details and your GitHub access token. We use the token to check your current membership when you use the hub.
• Registered devices. Native Talk sign-in gives the app an encrypted access token. We store your GitHub login, role, device name, a hash of the token, and its issue, use, expiry, and revocation times in Neon. A hash identifies the token without storing a usable copy. We also store the app's push notification token to deliver replies after a call.
• Staff records. The hub reads staff names, account identities, account access, and work activity from the fleet database in Neon. A request to manage staff accounts includes the details you submit, such as a name, email address, or GitHub login. Requests also record who made them, their role, the time, and the result. Staff emails include the recipient address and account setup or closure details.
• Talk calls. A voice call sends microphone audio to OpenAI for transcription and voice replies. OpenAI also receives agent replies to speak during the call. We relay request text to the selected fleet agent. Neon stores that text, agent replies, corrections, and approval records as text transcripts. It also stores your GitHub login, selected agent, call times, usage, and cost. The fleet database stores text transcripts, not audio recordings.

No advertising cookies and no cross-site tracking. We do not sell personal information, and we do not share it with advertisers or data brokers. This website never asks for payment details.

The staff hub and Talk send the sign-in details, audio, and request text described above. Our other software products do not send your files, messages, or source code to VanillaGreen. Where a product connects to a third-party service, such as a package registry, a model provider, or a market data feed, it does so under settings you control. Each product documents that behaviour in its own repository or documentation.

Analytics tell us which pages are read so we can keep the site useful. Contact-form data exists so we can answer you. Logs exist for security and troubleshooting. Staff identity and device records control access and let us revoke a device. Staff records support account management and show work activity. Staff emails explain account setup and closure. Talk audio and text let you speak with agents, send requests, hear replies, and review earlier requests and decisions. Call usage and cost records control spending. We do not use this information for advertising or profiling, and we do not train models on your messages.

We use a small number of providers, each handling data only to deliver the service we hired them for.

• Vercel: website and hub hosting, request processing, logs, and analytics.
• Resend: delivery of contact-form messages and staff account emails.
• GitHub: staff sign-in and organization membership checks, plus repository hosting. Public star-count requests send no personal data.
• OpenAI: Talk audio transcription and voice replies, including the agent reply text sent for speech.
• Neon: storage and retrieval of staff records, device records, requests, call records, and text transcripts.
• Expo: push notification delivery for the native Talk app.

We delete contact-form messages once they are no longer needed, and in any case within 24 months of receipt. Analytics and server logs are retained by our host under its own schedule. We do not keep analytics in an identifiable form.

The fleet keeps Talk text transcripts for 5 days. Request and decision records can remain after a transcript is deleted. Token expiry ends access; it does not delete a device record. Revoking a device removes its push notification token.

Wherever you live, you can ask us what we hold about you, ask us to correct it, ask us to delete it, or ask for a copy. Write to contact@vanillagreen.com and we will answer within 30 days. Asking costs nothing and we will not treat you differently for it.

California residents: we do not sell or share personal information as the CCPA defines those terms. Washington residents: we do not collect consumer health data under the My Health My Data Act. Residents of the EEA and the UK: our legal basis is legitimate interest for analytics and security, and performance of your request for contact-form messages.

VanillaGreen LLC is based in the United States, and our providers process data there. A message you send from outside the United States is transferred to and stored in the United States.

Our website and products are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has sent us something, write to us and we will delete it.

When this policy changes we update the date at the top of the page. Material changes are described here rather than made quietly.

Privacy requests and questions: contact@vanillagreen.com. The terms governing use of our products are in the terms of service, and our source code is at github.com/vanillagreencom.