Privacy Policy

Vyrkon is a product/service operated by ONEPEAK AI LLC(Miami, FL, United States). Vyrkon is the trade name; ONEPEAK AI LLC is the legal entity and the data controller for the processing described in this policy.

At Vyrkon we respect your privacy and that of your customers. This document explains what data we collect, why, and how we protect it.

1. What data we store

From the Client (account)

• Email, name, optional WhatsApp number, preferred language.
• Contracted plan, payment dates, last login.
• Agent configuration: tone, rules, knowledge base, integrations.

From End Users (visitors who chat with the agent)

• The content of the conversation (text and, if they send voice notes, the audio).
• Metadata: detected language, channel, approximate country, timestamp; and the phone/email if the visitor shares them (for example, to book an appointment or leave contact details).
• The widget embedded on our Client's site does NOT install third-party tracking cookies: it only uses local storage for the chat session ID.
• Our public site (vyrkon.ai) does use analytics, but only if you accept it in the cookie notice (see the Cookie Policy).

2. Why we process it

Solely to deliver the service (training the Agent, answering queries, generating invoices, support). We do not sell data to third parties. We do not use it to train models shared across clients.

3. Sharing with third parties (subprocessors)

To operate the service we rely on the providers below. Each one processes only the data it needs for its function; we do not sell data or use it to train models shared across clients. Some only come into play if you enable the corresponding feature (voice, scheduling, a messaging channel).

Artificial intelligence (they process the content of conversations)

• Anthropic (Claude): primary engine for responses and for agent creation. It does not retain data for training under our enterprise API key.
• OpenAI: knowledge embeddings, voice note transcription (Whisper), and avatar generation.
• Google (Gemini): backup response engine and enrichment with public business data when creating the agent.

Infrastructure, data, and payments

• Supabase: database (Postgres), authentication, and file storage (knowledge, avatars).
• Render and Vercel: hosting for the API and the website, respectively.
• Upstash (Redis): caches and usage limits. Cloudflare: delivery network and protection (sees the IP in transit).
• Stripe: payments and subscriptions. Card data is handled by Stripe under PCI-DSS; we never see it.
• Resend: transactional email delivery (access links, invoices, notifications).

Optional features (only if they apply to your agent)

• ElevenLabs: voice synthesis, if you purchase the voice add-on.
• Twilio and Meta (WhatsApp Cloud / Instagram): phone numbers and message content, depending on the channel where your agent lives.
• Email (via Resend): if you enable the email channel, your agent handles its own mailbox (your-agent@send.vyrkon.ai) and replies conversationally. We process the sender's address and the content of received and sent emails, just like any other agent conversation.
• Apify and Firecrawl: read public data about your business (website, social media) to prepare the agent during creation.
• Google Calendar: availability and event creation, if you connect your calendar for scheduling.

Analytics and monitoring of our site

• Google Analytics, PostHog, and Vercel Analytics: measure the use of vyrkon.ai to improve it. They are enabled only with your cookie consent (details in the Cookie Policy).
• Sentry: technical error logging to diagnose failures.

4. Retention

While your account is active, we keep the conversations and the knowledge so the agent can work. If you cancel, your data is not deleted automatically: we keep it in case you reactivate the account.

You can request permanent deletion at any time by writing to info@vyrkon.ai or through the form in section 5; we process it within a maximum of 30 days. Our database backups rotate and are deleted after 30 days.

5. Your rights (ARCO)

You have the right to Access, Rectification, Cancellation/Deletion, Objection, and Portability over the personal data we process.

You can exercise them right here:

If you prefer, write to info@vyrkon.ai with your specific request. Through either channel we respond within 30 business days under GDPR Art. 12 / LGPD Art. 18 / Law 1581/2012 (CO). Applicable jurisdiction: Florida, USA.

6. Security

• Data in transit: TLS encryption (HTTPS across the entire site and API).
• Data at rest: encryption managed by our database and storage provider (Supabase, AES-256).
• Administrative access protected with two-factor authentication (2FA/TOTP) and audit logging.

7. Contact

For questions: info@vyrkon.ai.

Data controller: ONEPEAK AI LLC · Miami, FL, US · Vyrkon is its product/brand.