Privacy Policy
Last updated: 12 October 2026
This policy explains what information Vego handles, why, and the choices you have. Vego is operated by Decordesk Technical FZE, SPC Free Zone, Sharjah, United Arab Emirates. For data your company enters about its clients and staff, your company decides how it is used and we process it on your company's instructions. For your own account details, we are responsible.
1. Information we handle
Account details
Name, email, mobile number, company name, team size, industry, role and username. Passwords are stored only as a secure hash. If you sign in with Google we receive your name, email and profile picture.
Business data you enter
Leads and client contacts, notes, quotations, invoices, receipts, expenses, supplier details, files, photos, drawings, tasks, schedules and messages.
Duty location
If your company uses duty tracking, the phone's location is recorded only at the moment a staff member taps Start duty and End duty, with the time. Vego does not track location in the background.
Voice and photos for Vegobot
When you tap the mic, your recording is sent to our AI provider to turn it into text. Vego does not save the recording; it keeps only the text you choose to use. Photos you add to an AI box are sent to the AI provider to read them.
Technical information
Basic logs needed to run and secure the service, such as sign-in times, app version, device and browser type, and notification tokens if you turn notifications on.
2. How we use it
- To sign you in and show each person only their own company's data.
- To provide the features you use: reminders, documents, AI writing, reports, backups and connections.
- To keep Vego secure, fix problems and answer your support requests.
- To tell admins about important changes to the service.
We do not sell personal data, use it for advertising, or use your company's data to train our own AI models. Our main AI provider (OpenAI) does not use data sent through its business API to train its models.
3. Separation between companies
Each company's data is kept separate by database security rules. People can only see the company they belong to. Platform administration does not include reading companies' business records, except when needed to fix a problem you report or when the law requires it.
4. Service providers
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions | India (Mumbai) |
| Netlify | Delivering the app | Global network |
| OpenAI | Vegobot writing, reading and voice to text | United States |
| Google (Gemini) | Backup AI when the main AI is busy | United States / global |
| Google (Sign-in, Maps) | Google sign-in; maps and routes if your company turns them on | Global |
| Meta (WhatsApp) / 360dialog | Only if your company connects WhatsApp | Global |
These providers process data for us under their own security and confidentiality terms. AI requests are sent through our server, not directly from your phone, and are made with storage turned off where the provider allows it.
5. International transfers
Some providers are outside the UAE. We use them only where they protect the data adequately, as required by the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
6. How long we keep data
We keep your company's data while the company uses Vego. If the admin asks us to delete the company, we delete it within 30 days, apart from what the law requires us to keep. Backups roll over and are cleared within a further 30 days.
7. Security
Data is encrypted in transit, access is limited by role, passwords are hashed and secret keys are kept on the server only. No system is perfectly secure; if a breach affects your data, we will tell you without undue delay.
8. Your rights
You can ask to access, correct, export or delete your personal data, or object to how it is used. Staff and clients of a company on Vego should first contact that company, as it controls their data. Admins can export everything from Backup & restore. To make a request, email support@vegocrm.com.
9. Google user data
Vego only requests your basic Google profile (name, email, picture) to sign you in. Vego's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
10. Children
Vego is for businesses and is not meant for anyone under 18.
11. Changes
We will post updates here and tell admins about important changes.
12. Contact
Decordesk Technical FZE, SPC Free Zone, Sharjah, United Arab Emirates
Email: support@vegocrm.com