Privacy Policy

1. Introduction and Scope

This Privacy Policy outlines how VΞRONOΛ ("we", "our", or "us") collects, uses, protects, and handles the data of developers, teams, and enterprise clients utilizing our Model Context Protocol (MCP) proxy gateways, command-line interfaces (CLI), and cloud registry. This policy applies strictly to our website, dashboard, and infrastructure services.

2. The Zero-Scrape Architecture (What We Do NOT Collect)

VΞRONOΛ is architected on a foundational principle of local-first privacy. We explicitly disclaim the collection of your proprietary data.

• Source Code: Our proxy daemon routes context entirely on your local network. We do not read, scrape, intercept, or transmit your local source code, proprietary algorithms, or private file structures to our servers.
• Credentials: We do not collect or store your private API keys for third-party Large Language Models (e.g., Anthropic, OpenAI). These remain sandboxed on your local device.

3. Information We Collect

To provide and maintain our enterprise infrastructure, we collect the following minimal data footprints:

• Account & Billing Data: When you create an account, we collect your email address and authentication details. Payment processing is handled by secure, PCI-compliant third-party Merchants of Record (MOR); we do not store raw credit card numbers.
• Telemetry & Usage Data: We collect anonymized operational telemetry from the CLI, including framework query frequencies (e.g., "Next.js routing queried"), vector retrieval latency, and error crash logs. This data is entirely decoupled from your personal identity and contains zero prompt content.
• Website Data: We utilize essential first-party cookies strictly to maintain secure session states and prevent Cross-Site Request Forgery (CSRF).

4. How We Use Your Information

The data we collect is utilized strictly for infrastructure provision and optimization:

• To authenticate your access to the Developer Dashboard and metered API endpoints.
• To dynamically adjust vector caching weights based on global framework demand.
• To communicate critical infrastructure updates, security patches, or billing notices.
• To detect and prevent abusive API token scraping or unauthorized gateway access.

5. Third-Party Integrations and LLM Providers

VΞRONOΛ acts exclusively as an MCP conduit. When you inject our vectorized framework context into an AI assistant (such as Cursor or Claude Desktop), the subsequent transmission of that combined prompt to an LLM provider is governed entirely by the Terms of Service and Privacy Policies of your chosen editor and model provider. VΞRONOΛ assumes no liability for data retention policies enforced by third-party LLMs.

6. Data Security and Retention

We employ industry-standard cryptographic protocols (TLS 1.3) for all data in transit between our cloud registry and your local proxy. Anonymized telemetry data is aggregated for system performance analytics and is routinely purged. Account and billing records are retained only for as long as legally required for tax and compliance auditing.

7. Your Privacy Rights (GDPR, CCPA, and Global Standards)

Depending on your jurisdiction, you retain comprehensive rights over your personal data:

• Right to Access: You may request a cryptographic export of all personal account data we hold.
• Right to Erasure ("Right to be Forgotten"): You may permanently delete your account and associated billing metadata via the Developer Dashboard.
• Right to Restrict Processing: You may opt out of non-essential marketing communications at any time.

8. Contact the Privacy Officer

If you are an enterprise compliance officer or a developer with questions regarding our vector routing security, please contact our privacy team directly at: privacy@veronoa.cloud.