Last updated: April 7, 2026
Vorantiq is committed to protecting your privacy and processing your personal data with responsibility and transparency. This Policy is applied in accordance with the Saudi Personal Data Protection Law (PDPL), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable international data protection legislation.
Vorantiq is the data controller responsible for processing your personal data. For all privacy-related matters:
Data Protection Email: privacy@vorantiq.dev
Website: vorantiq.dev
We collect the following categories of personal data:
Account Data
Usage and Performance Data
Billing and Payment Data
Communication and Support Data
We process your personal data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Service delivery and payment processing | Contract performance (GDPR Art. 6(1)(b)) |
| Security and fraud prevention | Legitimate interests (GDPR Art. 6(1)(f)) |
| Technical notices and service updates | Contract performance / Legitimate interests |
| Marketing and promotional communications | Explicit consent (withdrawable at any time) |
| Compliance with legal obligations | Legal obligation (GDPR Art. 6(1)(c)) |
We retain your data only for as long as necessary to fulfil the stated purposes:
| Data Type | Retention Period |
|---|---|
| Active account data | Duration of subscription |
| Account data after cancellation | 30 days then permanently deleted |
| Audit and security logs | 90 days (configurable for Enterprise plans) |
| Billing and transaction records | 7 years (tax and accounting obligation) |
| Support ticket history | 2 years after ticket closure |
| Marketing data (with consent) | Until consent is withdrawn |
We do not sell your personal data to any third party. We share data only with the following service providers strictly for operational purposes:
Purpose: Payment processing, subscription management, and tax collection
Data shared: Email, billing address, transaction history
Purpose: Processing LLM inference requests via API
Data shared: Agent prompt content (what you send to models)
Purpose: Error monitoring and exception tracking
Data shared: Error logs and technical traces (anonymised)
Your data may be processed in countries outside the Kingdom of Saudi Arabia or the European Economic Area. In all cases, we ensure appropriate safeguards are in place in accordance with recognised legal frameworks, including Standard Contractual Clauses (SCCs) for EU data transfers.
We implement multilayered security safeguards to protect your data:
Authentication
JWT + HttpOnly cookies + token rotation with reuse detection
Encryption
TLS 1.3 in transit, bcrypt for passwords
Two-factor auth
TOTP with 10 backup codes, 5-attempt rate limit
Access control
RBAC with 3 levels (admin / developer / user)
CSRF protection
Double-submit cookie pattern
Rate limiting
Redis-backed per-endpoint limits
Security headers
HSTS, CSP, X-Frame-Options, X-Content-Type-Options
Audit logs
Immutable logs with 90-day default retention
Under the Saudi Personal Data Protection Law (PDPL), you have the right to:
Users in the European Union have additional rights under the GDPR:
To exercise any of these rights, contact us at: privacy@vorantiq.dev. We will respond to all legitimate requests within 30 days.
California residents have the right to know what personal data we collect and how it is used, request deletion of their personal data, and not face discrimination for exercising their rights. We do not sell personal data to any third party. To submit a request, contact privacy@vorantiq.dev with subject line "CCPA Request".
We use the following types of cookies:
You can manage cookie preferences through your browser settings. Note that disabling essential cookies may impair core service functionality.
The Service is not directed to individuals under the age of 18. If we discover that we have collected personal data from a person under the required age without parental consent, we will immediately delete that data. If you believe a minor has submitted data to us, please contact privacy@vorantiq.dev.
We may update this Policy from time to time. We will notify you of material changes via email and/or a prominent in-platform notice. Your continued use of the Service after the update constitutes your acceptance of the revised Policy.
For any privacy inquiries or to exercise your rights:
Privacy Email: privacy@vorantiq.dev
Website: vorantiq.dev
We are committed to the principles of transparency, purpose limitation, accuracy, and data integrity in accordance with all applicable regulatory frameworks. Your privacy is not just a legal obligation — it is a core value.