Privacy Policy

Vex is operated by Neural Core Ltd ("we", "us", "our"). This policy explains what data we collect, why, and how we handle it.

1. What We Collect

Account Data

When you create an account, we collect your email address and display name. If you sign in via a third-party provider (Google, Discord), we receive the profile information you authorise.

Voice and Audio Data

All speech processing (voice activity detection, speech-to-text, wake word detection) runs locally on your device. We do not transmit, store, or have access to your raw audio or voice recordings. Audio never leaves your machine.

AI Command Data

When a voice command cannot be resolved locally and is sent to our AI service for intent resolution, we transmit the transcribed text (not audio), your active game context, and relevant binding information. This data is used solely to resolve the command and return a result. Transcribed text is anonymised before any logging for quality assurance purposes.

Vision Mode Data

When you use Vision Mode (Help or Watcher features), screen captures of the regions you select are sent to our AI service for analysis. These images are processed in real time and are not stored on our servers after the response is delivered. We do not capture or transmit any screen content outside the regions you explicitly select.

Subscription and Billing Data

Payments are processed by Lemon Squeezy. We do not directly handle or store your payment card details. We receive confirmation of your subscription status, tier, and billing cycle from Lemon Squeezy to manage your account features.

Usage Metrics

We collect anonymised usage metrics such as command counts, cache hit rates, and latency measurements to improve the service. These metrics are not linked to your identity or the content of your commands.

Local Data

Vex stores data locally on your device including: profiles, cached AI command results, TTS audio cache, binding configurations, and application settings. This data remains on your machine and is not transmitted to us unless explicitly described above.

2. How We Use Your Data

• To provide and operate the Vex service
• To resolve voice commands via our AI service when local resolution fails
• To process Vision Mode queries you initiate
• To manage your account and subscription
• To improve AI accuracy through anonymised quality assurance (with PII removed)
• To send service-related communications (account issues, critical updates)

3. Third-Party Services

We use the following third-party services:

• Supabase for authentication and user data storage
• Google Gemini for AI intent resolution and vision analysis
• Lemon Squeezy for subscription billing
• Cloudflare for content delivery and API routing
• ElevenLabs for premium cloud text-to-speech (only when you provide your own API key)

Each third-party service is governed by its own privacy policy. We encourage you to review them.

4. ElevenLabs (Bring Your Own Key)

If you choose to use ElevenLabs cloud voices, you must provide your own ElevenLabs API key. When you do, your transcribed TTS text is sent directly to ElevenLabs using your key. We do not store, proxy, or have access to your ElevenLabs API key or the audio generated through it. Your use of ElevenLabs is governed by their terms and privacy policy.

5. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• AI command logs: Anonymised logs retained for up to 90 days for quality assurance, then deleted.
• Vision Mode captures: Not retained. Processed in real time and discarded after the response is delivered.
• Local data: Stored on your device under your control. Removed when you uninstall Vex or clear app data.

6. Data Security

We use industry-standard security measures including encrypted connections (TLS) for all data in transit, JWT-based authentication, and access controls on our infrastructure. However, no system is perfectly secure, and we cannot guarantee absolute security.

7. Your Rights

You may:

• Request a copy of the personal data we hold about you
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time by discontinuing use of the service
• Use Vex without an account (guest mode) for manual actions only, with no data collected

8. Children

Vex is not intended for use by anyone under the age of 13. We do not knowingly collect personal data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the application or email. Continued use of Vex after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or data requests, contact us at privacy@heyvex.gg.