Privacy Policy

Website visitors

When you visit vrexohq.com, we collect standard server log data: IP address, browser type, referring URL, and pages visited. We also collect analytics data through Vercel Analytics to understand how visitors use the site. This data is aggregated and not linked to individual identities.

Customers and trial users

When you create an account or begin a trial, we collect your name, business email address, company name, and the information you provide during onboarding. We collect this to operate the service and to contact you about your account.

Service data

To operate the platform, Vrexo processes ticket data, user account data, and system configuration data from the tools you connect (PSA, RMM, identity providers). This data is described in detail in the Customer Data section below.

We use the information we collect to operate and improve the Vrexo platform, to communicate with you about your account and the service, to fulfill our contractual obligations, to comply with legal requirements, and to protect the security and integrity of the platform. We do not sell personal information to third parties. We do not use your data for advertising.

Isolation and access

Each customer environment is logically isolated. Vrexo does not access or process data from one customer's environment in another. Your ticket data, user data, and configuration data are not accessible to other Vrexo customers.

No training on customer data

Vrexo does not use your data to train machine learning models. Classification and resolution models are trained on aggregate synthetic data and opt-in shared datasets. Your operational data stays within your tenant environment.

Data you control

You retain ownership of all data you provide or that is generated by your connected systems. You can export your data at any time. Upon termination of your account, your data is deleted from our systems within 30 days unless you request an earlier deletion or applicable law requires a different retention period.

Subprocessors

Vrexo uses Microsoft Azure to host and operate the platform. Azure processes data on our behalf under appropriate data processing agreements. A current list of subprocessors is available on request at privacy@vrexohq.com.

We do not share your personal information or customer data with third parties except: to operate the service using our subprocessors (such as Microsoft Azure), as required by applicable law or legal process, to protect the rights and safety of Vrexo, our customers, or others, or with your explicit consent. We may share aggregated, non-identifiable statistics about platform usage, but these cannot be traced back to individual customers.

Vrexo runs on Microsoft Azure AI infrastructure. All data is encrypted in transit using TLS and encrypted at rest. We maintain SOC 2 Type II certification, which requires annual third-party audits of our security controls. We operate tenant-isolated environments, enforce role-based access controls, and maintain an incident response program. If you discover a security vulnerability, please report it to security@vrexohq.com.

We retain account information for as long as your account is active and for a reasonable period after closure to fulfill our legal and contractual obligations. Customer ticket and operational data is retained according to your configured retention policy. You can configure retention windows of 30, 90, or 365 days depending on your plan. Website analytics data is retained for 12 months.

Depending on your location, you may have the right to access the personal information we hold about you, to request correction of inaccurate data, to request deletion of your data, to object to certain types of processing, and to data portability. To exercise these rights, contact us at privacy@vrexohq.com. We will respond within 30 days. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. California residents may exercise rights under the California Consumer Privacy Act (CCPA) through the same contact.

We use a limited number of cookies necessary to operate the platform and a session cookie to maintain your logged-in state. We use Vercel Analytics, which does not rely on cookies for visitor tracking. We do not use advertising cookies or behavioral tracking cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

We may update this Privacy Policy from time to time. If we make material changes, we will notify active customers by email at least 14 days before the changes take effect. The effective date at the top of this page reflects the most recent revision. Continued use of the service after the effective date constitutes acceptance of the updated policy.