Privacy Policy

Last updated: May 2026

1. Introduction

VermelhoAI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the VermelhoAI platform. By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the following types of information:

  • Account information: Email address and password (hashed) when you create an account
  • Audit data: AI endpoint URLs, audit results, risk scores, and security findings generated during tests
  • Usage data: Information about how you use the Service including pages visited and features used
  • Payment data: Subscription and billing information processed by Lemon Squeezy — we do not store payment card details

3. API Keys

API keys submitted for testing are used solely to conduct the authorized security test during that session. API keys are transmitted securely over HTTPS and are never stored in our database, logs, or any persistent storage. Once the audit is complete, the API key is discarded.

4. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process your subscription and send billing receipts
  • Send audit completion notifications and security reports
  • Respond to support requests and inquiries
  • Improve and develop new features for the Service
  • Comply with legal obligations

5. Data Storage and Security

Your data is stored in a secure PostgreSQL database hosted by Neon. We implement industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), and access controls. Audit results are stored and associated only with your account and are not accessible to other users.

6. Data Retention

We retain your account information for as long as your account is active. Audit results and reports are retained indefinitely so you can access historical reports. If you delete your account, your personal data and audit history will be permanently deleted within 30 days. API keys are never retained beyond the duration of a test session.

7. Third Party Services

We use the following third party services to operate VermelhoAI:

  • Neon: Database hosting
  • Vercel: Application hosting and deployment
  • Groq: AI analysis of security test results
  • Lemon Squeezy: Payment processing and subscription management
  • Resend: Transactional email delivery

Each of these services has their own privacy policy governing their use of data.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your audit reports and data
  • Opt out of non-essential communications

To exercise any of these rights, contact us at hello.vermelhoai@gmail.com

9. Cookies

VermelhoAI uses a single session cookie (`hr_session`) to maintain your authenticated session. This cookie is strictly necessary for the Service to function and does not track you across other websites. We do not use advertising cookies or third party tracking cookies.

10. Children's Privacy

VermelhoAI is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Service. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Official Communications

VermelhoAI communicates with users exclusively via hello.vermelhoai@gmail.com. We will never contact you from any other email address. If you receive a message claiming to be from VermelhoAI from a different address, treat it as fraudulent and do not click any links.

13. Contact

For privacy-related questions or to exercise your rights, contact us at hello.vermelhoai@gmail.com