Your information, handled with care.
This policy covers our public website, contact inbox, and private pilot workspace at app.aiployee.vague.so.
Who we are
Aiployee is operated by Vague MENA FZ LLC, United Arab Emirates. Contact hello@vague.so for privacy questions or requests.
What this website collects
- Website requests: Cloudflare processes technical information such as IP addresses, request URLs, browser information, timestamps, and security events to deliver and protect this website. Operational logs and sampled traces may be retained by the hosting service.
- Information you send: if you email us, we receive your email address, name if supplied, and the content and attachments you choose to send.
- Sample conversations: the interactive demo uses preset examples. It does not connect to WhatsApp, call an AI model, or store your selections on a server.
This website does not add advertising trackers, analytics cookies, or account cookies. Fonts and site assets are served with the website.
How we use information
We use website request information to operate, secure, and troubleshoot the site. We use enquiries to respond, discuss the product or a pilot, and keep necessary business correspondence. We do not sell personal information or use website enquiries to train AI models.
Where applicable law requires a legal basis, we rely on our legitimate interests in operating a secure website and answering enquiries, steps requested before a contract, legal obligations, or consent where required.
Service providers and sharing
Cloudflare provides website infrastructure. Our email service providers process messages sent to our business inbox. We may also disclose information where legally required or necessary to protect rights and security. We do not share website enquiries with AI model providers through this site.
Service providers may process information outside your country, including outside the UAE. Applicable transfer protections depend on the provider and service. You can contact us for details relevant to your information. See Cloudflare’s privacy policy.
Retention and security
We keep enquiry information only as long as needed to respond, maintain an ongoing business relationship, or meet legal obligations. Hosting logs follow the configured provider retention. We use access controls and encrypted transport, but no online service can guarantee absolute security.
The private Aiployee pilot
The product workspace is a private pilot. It stores the owner’s name and email, a password hash, session records, business knowledge notes, practice conversations, and workspace activity. Essential sign-in cookies keep you authenticated. The public website’s sample demo remains separate.
When an authorised business connects WhatsApp, the workspace processes business and phone identifiers, encrypted access credentials, customer phone numbers, available profile names, message text, timestamps, and delivery status to provide its inbox and replies. Media is represented by a placeholder; this pilot does not download media or import historical chats and contacts.
Cloudflare Workers, D1, R2, and Durable Objects host the product and its stored data. Relevant recent conversation text and business knowledge are sent to Cloudflare Workers AI through AI Gateway to generate replies. Gateway prompt logging and response caching are disabled in this deployment. Aiployee does not use workspace content to train its own models. Meta processes connected WhatsApp messages under its own terms and privacy practices.
Workspace information remains until the owner deletes it or requests account deletion. Owners can delete individual notes and conversations, export workspace content, or disconnect WhatsApp to remove saved connection credentials and stop future access. Disconnecting does not delete existing conversation records. Provider backups and operational logs may remain for their normal retention periods.
Businesses are responsible for the customer information they provide, appropriate notices and permissions, and deciding whether AI replies are suitable. Before an external customer pilot, we agree service scope and data-processing roles with the business. Do not upload sensitive customer records during initial evaluation.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your information, object to certain processing, or withdraw consent where processing relies on it. You may also raise a concern with the relevant data protection authority.
Email hello@vague.so. We may need proportionate information to verify your request. For deletion, see our step-by-step instructions.
Children and changes
This website is intended for business users, not children. Please contact us if you believe a child has supplied personal information. We will update this page when our practices change and show the latest revision date above.