// LEGAL

Privacy Policy

DRAFT — requires human legal review before relying on this text in procurement.

Last updated: 26 July 2026

Data controller

Vex Raptor is operated by the Vex Security team. Full legal entity name and registered address are available on request and are provided in full within any DPA, MSA or procurement documentation.

For privacy enquiries, data subject requests or a copy of our DPA, contact [email protected].

What we collect

When you request a demo or contact us via the website, we collect the information you submit: name, work email, company, role, and use case.

When you use the Vex Raptor product (self-hosted or hosted Eval console), scan data stays under your control on paid plans; Eval console data is processed to provide the service.

Legal basis (GDPR)

We process demo and sales enquiries on the basis of legitimate interest and pre-contractual steps (Art. 6(1)(b) and (f) GDPR).

Product processing on self-hosted deployments is performed under your instructions as data controller for your scan data.

Retention

Demo enquiries are retained for up to 24 months unless you ask us to delete them sooner.

Self-hosted customers control retention of scan data in their own infrastructure.

Your rights

You may request access, correction, deletion, restriction, or portability of personal data we hold about you, and object to processing where applicable.

EU/EEA residents may lodge a complaint with their supervisory authority.

Sub-processors

Website hosting, email delivery, and (if configured) analytics providers may process limited contact data on our behalf. A current list is available on request.

LLM inference for optional AI features may use Google Vertex AI or another enterprise backend you configure — not consumer Gemini free-tier in production.