Privacy Notice
This Privacy Notice explains how the VAYON public website handles personal information when you visit the site, request a demonstration, contact us, or communicate with us about the product.
1. Operator identity
The VAYON public website is operated by Vayon AI security and governance LTD, located at 15/3 HaTzaftzafa St., Ma'ale Adumim, Israel (“VAYON”, “we”, “us” or “our”).
This notice covers the public marketing website and, in sections 13 and 14 below, the VAYON browser and VS Code extensions. It does not describe how a customer's own VAYON deployment processes data — that runs in the customer's environment and is governed separately.
2. Information we collect
We collect information that you choose to provide through our Demo and Contact forms, which may include:
- your name
- business email address
- telephone number
- organization name
- country
- preferred contact method
- enquiry type, subject and message
- information you provide about your organization's interests or requirements
We may also process limited technical information needed to operate and protect the website, such as request timestamps, IP-derived security information, browser information, server logs and anti-abuse signals.
Please do not submit passwords, API keys, access tokens, confidential source code, sensitive personal information or other secrets through the website forms.
3. How the website handles enquiries
The public VAYON website does not maintain a local database of contact or demo requests.
When you submit a valid form, the information is securely forwarded to the VAYON request-management environment so that authorized personnel can review and respond to it.
4. Why we use the information
We use the information for the following purposes:
- to respond to demo requests and enquiries
- to communicate with you about VAYON
- to understand your organization's requirements
- to manage potential or existing business relationships
- to operate, protect and troubleshoot the website
- to prevent spam, fraud and misuse
- to meet legal and regulatory obligations where applicable
Where applicable, our legal bases may include taking steps at your request before entering into a business relationship, our legitimate interests in responding to business enquiries and protecting our services, compliance with legal obligations, and your consent for optional analytics technologies.
We do not use enquiry data to make solely automated decisions that produce legal or similarly significant effects.
5. Analytics and cookies
The website may use strictly necessary local storage or similar technologies to remember security, language or privacy preferences.
Optional analytics, when configured, are activated only after you make an affirmative choice to allow them. You may reject optional analytics and continue using the website and its forms.
You may change your analytics preference through the privacy-preferences link available on the website.
6. Who may receive the information
Information may be accessed by authorized personnel who handle sales, demonstrations, partnerships, support, security or website operations.
We may also use service providers that support hosting, communications, security or request management. They may process information only as required to provide their services and subject to appropriate confidentiality and security obligations.
We do not sell personal information.
We may disclose information where required by law, a valid legal process, or where reasonably necessary to protect the security and rights of VAYON, its users or others.
7. International processing
Depending on the services used to operate the website and respond to enquiries, information may be processed in countries other than your own.
Where required by applicable law, we use appropriate contractual, organizational or technical safeguards for such processing.
8. How long we keep information
We retain enquiry information only for as long as reasonably necessary to:
- respond to the enquiry
- manage a potential or active business relationship
- maintain appropriate business and security records
- meet applicable legal obligations
- establish, exercise or defend legal claims
Information that is no longer required is deleted or anonymized in accordance with our operational retention practices.
9. Security
We use reasonable technical and organizational measures intended to protect information against unauthorized access, disclosure, alteration or loss.
No internet transmission or storage system can be guaranteed to be completely secure. Please avoid submitting confidential or sensitive material that is not necessary for your enquiry.
10. Your choices and rights
Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:
- request access to information we hold about you
- request correction of inaccurate information
- request deletion of information
- object to or request restriction of certain processing
- withdraw consent where processing is based on consent
- request a portable copy of certain information
- submit a complaint to an applicable data-protection authority
To submit a request, contact us using the details below. We may need to verify your identity before completing a request.
11. Children
The VAYON website and its business-enquiry forms are intended for organizations and professional users. They are not directed to children.
12. External links
The website may link to external websites or services, including the VAYON Portal. Their privacy practices are governed by their own notices, and we are not responsible for the privacy practices of unrelated third parties.
13. VAYON Governance browser extension
The VAYON Governance extension is installed by an organization on the workstations it manages, through enterprise browser policy. It works only with that organization's own VAYON server, which the organization installs and operates in its own environment. The organization is the controller of all data the extension handles. Vayon AI security and governance LTD does not receive, store or have access to any of it. The extension sends nothing to VAYON the company, to Google, or to any other party.
The extension is active only when your organization installed it through enterprise policy and your organization's VAYON server is reachable over a certificate your organization trusts. A copy installed any other way does nothing.
Everything the extension processes goes only to your organization's VAYON server:
- Text you are about to send to an AI service on the sites your organization chose to govern (for example chatgpt.com), at the moment you send it. It is checked against your organization's policy.
- Files you are about to upload to those sites. They are checked the same way.
- The name of the AI site involved, and your response to a warning (for example, that you chose to continue).
- Text you choose to move into your organization's internal assistant, when you pick that option.
- Technical status: a random installation identifier, the extension version, the policy mode and version in force, the computer name set by your organization's policy, and the times when your organization's server could not be reached.
How long any of this is kept, and who in your organization can see it, is decided by your organization and set on its VAYON server.
On your computer the extension keeps only the random installation identifier, a workstation credential issued by your organization's server, and the last policy settings your organization's server confirmed, so it still behaves correctly while the server is unreachable. It keeps no message content.
The extension does not read pages outside the sites your organization governs. It does not track browsing, show advertising, sell data, or use information for any purpose other than your organization's AI governance. It does not transfer data to third parties.
If the server is unavailable, the extension tells you that governance is unavailable and lets you continue. Nothing is sent while the server is unreachable.
Your organization is the controller, so direct requests about your data to your organization's privacy or IT contact. Questions about the extension itself can go to privacy@vayonai.com.
Chrome Web Store Limited Use: the extension's use of the information it receives complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
14. VAYON Code Assistant (VS Code extension)
The VAYON Code Assistant works only with your organization's own VAYON server, which your organization installs and operates in its own environment. Your organization is the controller of all data the extension handles. Vayon AI security and governance LTD does not receive, store or have access to any of it. The extension sends nothing to VAYON the company, to Microsoft, or to any other party. VS Code's own telemetry is governed by VS Code's settings, not by this extension.
The extension works only when two conditions hold. First, it reaches your organization's VAYON server, at vayon.internal or at an address your organization configured, over a certificate your organization trusts. Second, you hold developer permission on that server. Otherwise it does nothing.
Everything below goes only to your organization's VAYON server, and only when you make a request:
- Your request and the earlier turns of the same conversation.
- The files and selections attached to the request. They are listed in the chat before the request goes out. Files the extension proposes on its own are shown and can be removed first. Credential files, ignored folders and binary files are never sent.
- Compiler and linter messages for those files. You can turn this off.
- The git changes you ask it to explain or review, or to draft a commit message for.
- The results of project lookups that VAYON asks the extension to run locally (a search, a file list, one file). They are bounded in size and listed in the chat.
- The results of local checks you approved in Agent mode.
- Identity and status: your sign-in to your organization's VAYON, your Windows account name on a domain workstation, a random installation identifier, and the extension version.
How long this is kept, and who in your organization can see it, is decided by your organization and set on its VAYON server.
On your computer the extension keeps only your sign-in credentials, in VS Code's secure storage, and a random installation identifier.
It does not read your project by itself or send anything without a request from you. It does not track you, show advertising, sell data, or use information for any purpose other than your organization's governed AI development.
Your organization is the controller, so direct requests about your data to your organization's privacy or IT contact. Questions about the extension itself can go to privacy@vayonai.com.
15. Changes to this notice
We may update this Privacy Notice when our website, services or information-handling practices change.
The date shown on this page indicates the latest revision. Material changes will be presented appropriately on the website.
16. Contact
For privacy questions or requests, contact Vayon AI security and governance LTD by email at privacy@vayonai.com, or by post at 15/3 HaTzaftzafa St., Ma'ale Adumim, Israel.
This notice describes the operation of the Vayon AI public website. Product deployments are governed separately.