Privacy policy

Last updated 6 September 2026

This policy explains what VedIQ collects, why, and what you can do about it. It describes how the product actually works rather than reserving every right we could theoretically claim.

What we collect

Information you give us

• Your email address and password, to create and secure your account. Passwords are hashed by our authentication provider; we never see them.
• Photographs of your palms, which are the input to your report.
• The name, age and (optionally) gender you enter for the reading. Age is required because the timeline chapter is anchored to it.

Information we generate

• Structured observations extracted from your images — measurements of lines, mounts and proportions.
• Your report, and the PDF rendered from it.
• Order and payment records, which we are required to retain for tax and accounting purposes.

Information collected automatically

Server logs, including IP address, for security, abuse prevention and debugging. We do not use advertising trackers or third-party analytics that profile you across sites.

How we use it

To generate and deliver your report, to let you access your past reports, to process payments, to provide support, to prevent abuse, and to meet legal obligations. That is the complete list.

We do not use your photographs or reports to train AI models, and we do not sell your data to anyone.

Who we share it with

Only the processors needed to run the service, each handling the minimum required:

• Supabase — database, authentication and encrypted file storage.
• Our AI provider — receives your palm photographs for the observation stage, and the resulting observations plus your name, age and gender for the writing stage. It does not receive your email address or payment details.
• Razorpay — processes your payment. We never receive your card details.
• Resend — delivers your report by email.

We may also disclose information where we are legally required to, and will tell you unless prohibited.

How long we keep it

• Palm photographs — deleted automatically 14 days after your report is delivered. If you never pay for the order, the photographs you uploaded for it are deleted 7 days after you upload them. You can delete them yourself at any point before that, from your dashboard. Your report is unaffected either way: it is written from the measurements, not the images.
• Reports and PDFs — kept while your account is open, so you can download them again.
• Order and payment records — retained as long as tax and accounting law requires, even after account deletion.
• Server logs — a short rolling window.

Security

Your photographs and reports are stored in private buckets that are never publicly readable. Access is granted only through short-lived signed links issued to you. Data is encrypted in transit and at rest. Staff access to customer images is restricted and logged with the identity of the person who viewed them.

Your rights

You can access your data, correct it, download your reports, delete your images, or delete your account entirely from your dashboard. You may also email support@vediq.ai and we will action the request. Deleting your account removes your images, observations and reports; order records are retained where the law requires.

Children

VedIQ is not for anyone under 18. We do not knowingly collect data from children, and will delete it promptly if we discover we have.

Changes

If we change this policy materially, we will tell you by email before the change takes effect.

Contact

[Registered company name], [Registered address]. Privacy questions and grievances: grievance@vediq.ai.