Privacy Policy

Account information: Your name, email address, and authentication credentials when you register or log in. We support email/password authentication and third-party OAuth (e.g., Google).

Usage data: Your search queries, discovery history, saved opportunities, vault folders, notes, tags, build history, credit balance, and credit transaction records.

AI feature data: Inputs and outputs related to opportunity scoring, AI summaries, Deep Analysis, PDF report generation, and AI Build generation (including platform selections and generated build packages).

Billing data: Subscription plan, purchase history, and payment metadata. Payment card details are processed securely by Stripe — we never store your full card number.

Abuse-prevention data: Device fingerprints (hashed), IP address hashes, email domain information, and account linkage signals. This data is used solely for fraud detection and prevention.

User-generated content: Notes, tags, vault folder names, and any other content you create within the platform.

We use your information to:

• Provide user accounts, authentication, and session management.
• Operate the universal Vockora Credit wallet, including credit grants, purchases, deductions, and refunds across all AI features.
• Deliver AI-powered opportunity discovery, scoring, summaries, Deep Analysis, and PDF report generation.
• Generate professional starter application builds and manage Build Soon / My Builds project tracking.
• Remember your saved opportunities, vault folders, notes, tags, and preferences.
• Process subscription billing, credit top-up purchases, and renewals via Stripe.
• Detect and prevent abuse, including multiple account creation and free credit exploitation.
• Generate aggregate, anonymised analytics about platform usage and feature adoption.

Free browsing without an account: Vockora allows visitors to browse the Opportunity Feed and view cached opportunity reports (including AI analysis) without registering or logging in. No account information is collected from visitors who only browse.

Publicly visible opportunity data: Opportunities discovered in Community Discovery mode are publicly visible to all visitors and users. This includes the opportunity title, summary, category, scores, and any AI-generated analysis associated with the opportunity. This data may also be indexed by search engines.

Private discovery: Opportunities discovered in Private Discovery mode are visible only to the account that discovered them and are never shown publicly.

Your contributions: If you run a discovery search in Community mode, the resulting opportunities may become publicly visible to other users and visitors. Your personal vault, notes, tags, and saved items are always private to your account.

Vockora offers two discovery modes that control how your discovered opportunities are shared:

Community Discovery: Opportunities you discover may be visible to other users in the community feed. This helps everyone benefit from shared market insights.

Private Discovery: Opportunities you discover are kept private and visible only to you. They will not appear in the community feed.

You can choose your discovery mode before each search. Saved opportunities in your Vault and Build Soon projects are always private to your account.

We use cookies and local storage to operate the platform. See our Cookie Policy for details.

We collect anonymised, aggregate analytics about how features are used (e.g., number of searches, build generations, credit transactions) to improve the platform. Analytics data is not linked to your identity in a personally identifiable way.

We use industry-standard security measures to protect your data, including encrypted transmission (TLS) and secure storage.

Payment processing is handled securely by Stripe — we do not store your card details.

Abuse-prevention data (device fingerprints, IP hashes) is stored in hashed form and is not linked to your identity in a reversible way.

While we strive to protect your data, no method of transmission or storage is 100% secure.

We retain your account and usage data for as long as your account is active. This includes saved opportunities, vault content, build history, and AI-generated analyses.

Credit transaction records and abuse-prevention data may be retained longer for audit, dispute resolution, and fraud-prevention purposes, even after account deletion.

Generated build packages and AI analysis outputs may be cached on the platform to serve future requests efficiently.

You may request deletion of your account at any time by contacting our support team. Upon deletion, your personal information will be removed from active systems within a reasonable timeframe.

Certain data, such as credit transaction records and abuse-prevention data, may be retained as described in the Data Retention section above.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing of your data.
• Withdraw consent for processing where consent is the legal basis.

To exercise these rights, please contact our support team. We will respond within a reasonable timeframe.

Vockora uses Google OAuth to allow users to sign in with their Google account. When you choose to sign in with Google, Vockora accesses, uses, stores, or shares the following Google user data:

• Name and profile picture: Accessed at sign-in to create and personalise your Vockora account. Stored on our servers to display your name and avatar within the app. Not shared with third parties.
• Email address: Accessed at sign-in to uniquely identify your account, send service notifications (e.g., billing receipts, security alerts), and prevent duplicate account creation. Stored for the lifetime of your account. Shared with Stripe (as billing metadata) only if you make a purchase.

How we use Google user data: Identity verification, account management, session authentication, billing, abuse prevention, and displaying your profile within the platform.

How we store Google user data: Your name, profile picture URL, and email address are stored securely on our servers with encrypted transmission (TLS). Authentication tokens are managed by the Base44 platform and are never exposed to the client.

How we share Google user data: We do not sell or rent Google user data to any third party. Your name and email may be shared with Stripe solely for payment processing when you make a purchase. Aggregate, anonymised analytics derived from usage data may be shared with analytics providers, but this data is not linked to your Google identity in a personally identifiable way.

Google API scopes: Vockora requests only the minimum scopes necessary for sign-in — openid, email, and profile. We do not request access to your Google Drive, Gmail, Calendar, Contacts, or any other Google service data.

Data retention: Google user data (name, email, profile picture) is retained for as long as your Vockora account is active. Upon account deletion, this data is removed from active systems within a reasonable timeframe, subject to the retention requirements described in Section 7.

Your choices: You may revoke Vockora's access to your Google account at any time by visiting your Google Account permissions page and removing Vockora. You may also request deletion of your Vockora account as described in Section 8.

Vockora's use of information received from Google APIs adheres to Google's API Services User Data Policy, including the Limited Use requirements.