Last updated: April 2026
Vector Panda operates a cloud-hosted vector database service. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
Account information. When you create an account, we collect your email address and name through Google OAuth or GitHub OAuth. We do not store your OAuth password — authentication is handled entirely by Google or GitHub.
API keys. We generate API keys that you use to access the Service programmatically. Keys are hashed and stored securely.
Vector data. You upload vector embeddings and associated metadata to our Service. This data is stored in your dedicated collections and belongs to you. We do not access or use your vector data for any purpose other than storing and retrieving it according to your instructions.
Usage data. We track API usage (request counts, storage volumes) for billing and service operations. We also collect aggregate counts for public page views, broad referral channels, navigation between our own pages, crawler activity, and account onboarding milestones so we can improve the site. These site metrics do not store IP addresses, session identifiers, full user-agent strings, or arbitrary referring URLs. We do not use third-party analytics tools or tracking technologies.
Cookies. We use a single session cookie to maintain your authenticated login state. Sessions are stored server-side. We do not use tracking cookies or advertising cookies.
We do not use your personal information for marketing, advertising, profiling, or any other purpose.
We share the minimum information necessary with the following service providers to operate. Each provider receives only the data fields listed; we do not sell personal information to anyone.
Method of disclosure. All disclosures to the providers above travel over TLS 1.3 encrypted connections. We do not transmit personal information to any party not listed here. We do not use third-party analytics, tracking pixels, advertising networks, or behavioral targeting tools.
Your data is hosted on bare metal servers under our direct control. Each client's vector data is stored in separate files with per-client isolation. All external connections use TLS 1.3 encryption. Backups of internal account state are encrypted with GPG before leaving the primary host and are never accessible to third parties. API keys are rotatable and stored hashed; we never display a previously-issued key in plaintext after creation.
Vector data persists until you explicitly delete it or remove the collection. You retain full control over when your data is deleted.
Account data is retained while your account is active. When you delete your account, we delete associated personal data within 30 days.
Usage records are retained for billing purposes for the duration of your account and for one year after account termination.
Access and export. You can request a copy of your personal information by emailing privacy@vectorpanda.com. We will provide your data in a machine-readable format within 30 days.
Deletion. You can request deletion of your personal information by emailing privacy@vectorpanda.com or by deleting your account through the dashboard.
These rights apply to all users, including those covered by GDPR and CCPA. We do not sell your personal information.
Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by updating the date at the top of this page and, where required, by email.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at privacy@vectorpanda.com.