Vermilleon Privacy Policy

Last updated: July 25, 2026

Vermilleon is a private intelligence tool designed to help people better understand communication patterns within conversations.

A user may upload an exported conversation from a third-party messaging service, such as Instagram, iMessage, WhatsApp, Telegram, or another platform, after obtaining the informed consent of every person whose messages are included. Vermilleon analyzes the submitted conversation and produces observations, summaries, signals, scores, and simulated responses.

This Privacy Policy explains what information Vermilleon collects, why we process it, how long we keep it, how we share and protect it, and the rights available to users and other people whose information may appear in an uploaded conversation.

Vermilleon's outputs are automated interpretations based only on the information submitted to the service. They may be incomplete or incorrect. Vermilleon is not therapy, medical advice, legal advice, a psychological diagnosis, a lie detector, or a substitute for professional judgment.

1. Who we are

Vermilleon is operated by:

Legal entity: [LEGAL ENTITY NAME]
Registered address: [REGISTERED ADDRESS]
Country of establishment: [COUNTRY]
Privacy email: [email protected]
General support: [email protected]

For applicable privacy laws, [LEGAL ENTITY NAME] is the controller responsible for determining how and why personal information is processed through Vermilleon.

2. Scope of this policy

This Privacy Policy applies to:

the Vermilleon mobile application;
the Vermilleon website;
uploaded conversations and generated analyses;
communications sent to Vermilleon; and
related services operated by Vermilleon.

This policy does not govern the privacy practices of Instagram, Apple, WhatsApp, Telegram, or any other third-party platform from which a conversation may have been exported. Vermilleon is not affiliated with those platforms unless expressly stated otherwise.

3. Consent is required before uploading a conversation

Uploaded conversations contain information belonging both to the uploading user and to other people who participated in the conversation.

You may only upload a conversation when:

you are a genuine participant in that conversation;
every identifiable person whose messages are included has been told that the conversation will be uploaded to Vermilleon;
every such person has affirmatively consented to the upload and automated analysis;
their consent covers the creation of observations and inferences about communication patterns, behavior, tone, consistency, emotional dynamics, and likely responses;
they have been given access to this Privacy Policy before consenting; and
their consent remains valid at the time of upload.

Simply being part of a conversation does not automatically give you permission to upload and analyze another person's messages.

By uploading a conversation, you confirm that these requirements have been satisfied. We may ask you to provide reasonable evidence that consent was obtained.

You must not upload:

conversations between other people that you were not part of;
conversations obtained through unauthorized access, deception, surveillance, hacking, or impersonation;
conversations involving a person who has refused or withdrawn consent;
conversations involving a person under 18;
workplace, medical, legal, educational, or similarly confidential communications unless every affected person has expressly consented and the upload is lawful;
information that you are legally or contractually prohibited from sharing; or
content submitted for harassment, stalking, intimidation, coercion, discrimination, exploitation, or manipulation.

If another participant withdraws consent, you must delete the relevant person and conversation from Vermilleon and stop using the associated results.

4. Information we collect

Vermilleon is designed to collect information that users choose to provide.

Account information

When you create or manage an account, we may collect:

your name or display name;
your email address;
your account identifier;
authentication information;
your account preferences; and
information you provide during onboarding.

Passwords, where used, are stored in hashed form rather than readable plain text.

Uploaded conversation information

When you upload a conversation, we process:

the text of the messages;
participant names or labels included in the export;
dates and timestamps included in the export;
attachments or attachment descriptions, where supported;
reactions, reply relationships, and other message metadata included in the exported file; and
any personal information contained within the conversation.

A conversation may contain sensitive information, including information concerning health, relationships, sex life, sexual orientation, religious or philosophical beliefs, political views, ethnicity, finances, or other private matters.

You must make sure that the consent you obtain specifically covers the possibility that the conversation contains sensitive information and that Vermilleon may analyze or infer patterns from it.

Generated analysis

Vermilleon may generate:

communication-pattern observations;
summaries and profile descriptions;
quoted or referenced evidence;
behavioral and relationship signals;
contradiction or consistency indicators;
tone, mood, and dimension scores;
warnings and positive signals;
suggested communication approaches;
estimated or simulated responses; and
confidence indicators.

Generated analysis is personal information because it may relate to identifiable people, even when it is an inference rather than a confirmed fact.

Sim and scenario information

When you use a simulation, scenario, or message-testing feature, we may process:

the message or situation you enter;
relevant context selected from the uploaded conversation;
generated estimated responses; and
your follow-up messages within that session.

Communications with Vermilleon

If you contact us, we may collect:

your contact details;
the contents of your request;
files or screenshots you provide; and
information needed to verify and respond to a privacy request.

Purchase information

If paid features are offered and you make a purchase through an app store or payment platform, we may receive limited information such as:

the product or entitlement purchased;
purchase status;
renewal or expiration status; and
an associated transaction or customer identifier.

Vermilleon does not receive or store complete payment-card numbers when purchases are processed by an app store or external payment provider.

5. Information we do not intentionally collect

Vermilleon does not intentionally collect:

your device contacts;
precise GPS location;
advertising identifiers;
browsing activity across unrelated apps or websites;
data for targeted or cross-context behavioral advertising;
payment-card numbers; or
conversations from your messaging accounts automatically.

Vermilleon does not access your messaging accounts or independently retrieve conversations. A user must deliberately export and upload a conversation.

We may process limited technical information that is strictly necessary to authenticate users, prevent abuse, maintain security, and operate the service. We do not use this information to create advertising profiles.

6. How we use information

We process personal information to:

create and operate user accounts;
receive and analyze conversations submitted with consent;
generate the requested observations, profiles, signals, scores, and simulations;
show evidence supporting an observation;
maintain service security;
prevent unauthorized access, fraud, misuse, and abusive activity;
respond to support and privacy requests;
process and verify purchases, where applicable;
comply with legal obligations;
investigate violations of our terms; and
protect the rights, safety, and integrity of users, conversation participants, and Vermilleon.

We do not sell personal information.

We do not share personal information for cross-context behavioral advertising.

We do not use uploaded conversations or generated analyses for advertising.

We do not use a conversation to contact, market to, or advertise to another participant.

7. Automated analysis

Vermilleon uses automated systems to examine text submitted by users.

The systems may evaluate patterns involving:

wording and tone;
changes in tone over time;
responsiveness and reciprocity;
consistency between statements;
repeated conversation cycles;
emotional or interpersonal pressure;
expressed intentions;
response timing where timestamps are available; and
other patterns visible within the submitted text.

The resulting analysis is probabilistic. It reflects a limited set of messages and may misunderstand sarcasm, cultural context, private circumstances, incomplete exports, changing relationships, or information that was never included.

A score, label, signal, warning, or simulated reply must not be treated as a verified fact about another person.

Vermilleon does not make legal, employment, financial, educational, medical, insurance, housing, immigration, or similarly significant decisions about the people appearing in conversations.

You must not use Vermilleon's output as the sole basis for a decision that could seriously affect another person.

8. Legal grounds for processing

Where applicable law requires a legal basis, we process information under one or more of the following grounds.

Consent

We rely on consent to process:

the user's uploaded conversation content;
the personal information of another conversation participant;
sensitive information that may appear in a conversation; and
automated observations and inferences made from the conversation.

The uploading user must obtain the other participant's informed and affirmative consent before uploading the conversation.

Consent may be withdrawn at any time. Withdrawal does not make earlier processing unlawful, but it prevents further processing based on that consent. When valid consent is withdrawn, the relevant information will be deleted unless retention is legally required.

Performance of a contract

We process account and service information when necessary to provide features requested by the account holder.

A contract with the uploading user does not, by itself, provide a legal basis for processing another participant's information. That processing depends on the participant's consent or another lawful basis recognized by applicable law.

Legitimate interests

We may process limited information where necessary to:

secure the service;
prevent fraud and abuse;
enforce our terms;
diagnose operational problems; and
protect legal rights.

We will not rely on legitimate interests where those interests are overridden by the rights and freedoms of the affected person.

Legal obligations

We may process or retain information where necessary to comply with applicable law, enforceable legal process, regulatory requirements, or binding governmental requests.

9. How we share information

We disclose personal information only as necessary to operate Vermilleon, fulfill user requests, protect the service, or comply with law.

Service providers

We may use carefully selected service providers for:

cloud hosting and storage;
automated language and AI processing;
authentication;
database infrastructure;
application security;
customer support;
subscription and entitlement management; and
payment processing.

A provider may receive only the information reasonably necessary to perform its assigned service.

Service providers are required to process personal information for the purpose of providing services to Vermilleon, follow our instructions, maintain appropriate safeguards, and delete or return information in accordance with our retention requirements.

Uploaded conversations and generated analyses may be transmitted to automated-processing infrastructure solely to produce the requested result.

Legal and safety disclosures

We may disclose information where we reasonably believe disclosure is necessary to:

comply with applicable law or valid legal process;
investigate fraud, abuse, security incidents, or violations of our terms;
protect the safety or rights of a user, another conversation participant, Vermilleon, or the public; or
establish, exercise, or defend legal claims.

Business transfers

If Vermilleon is involved in a merger, financing, acquisition, restructuring, insolvency, or sale of assets, information may be transferred as part of that transaction.

Any successor must process the transferred information consistently with this Privacy Policy unless affected individuals are properly informed and another lawful basis applies.

10. Seven-day deletion policy

Vermilleon is designed around short data retention.

The following information is automatically and permanently deleted no later than seven days after it is uploaded or created:

raw uploaded conversation files;
parsed message content;
attachments submitted with a conversation;
Sim and scenario inputs;
generated simulated responses; and
temporary processing copies held by our service providers.

We do not move uploaded conversations into a longer-term archive after the seven-day period.

We require applicable service providers to delete or render inaccessible their processing copies within the same seven-day period.

Deleting a conversation or person manually will begin deletion before the automatic seven-day deadline.

Account information is retained while the account remains active because it is required to provide the service. A user may request account deletion at any time.

Purchase and transaction records may be retained for longer where required for accounting, fraud prevention, dispute resolution, app-store reconciliation, or compliance with law.

Support and privacy-request communications may be retained for as long as reasonably necessary to resolve the request, document our response, and meet legal obligations.

Where information must be retained by law, it will be isolated and used only for the legally required purpose.

11. Security

Vermilleon uses administrative, organizational, and technical safeguards designed to protect personal information.

These measures may include:

encryption during transmission;
encryption of stored conversation data;
restricted employee and contractor access;
authenticated user sessions;
access controls and user-account separation;
monitoring for abuse and unauthorized access;
secure software-development practices;
deletion and retention controls; and
contractual safeguards for service providers.

Only personnel and providers with a legitimate operational need may access personal information.

Providing automated analysis requires the conversation to be processed in readable form during analysis. Vermilleon is therefore not an end-to-end encrypted messaging service.

No transmission or storage system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur.

If we discover a personal-data breach, we will investigate it and provide notices where required by applicable law.

12. Your privacy rights

Depending on where you live, you may have the right to:

obtain information about how your personal information is processed;
request access to your personal information;
request correction of inaccurate information;
request deletion;
withdraw consent;
restrict certain processing;
object to certain processing;
receive a portable copy of information you provided;
appeal our handling of a privacy request;
complain to a privacy or data-protection authority; and
receive equal service without unlawful discrimination for exercising privacy rights.

These rights may be subject to legal limitations or exceptions.

To submit a request, email [email protected].

We may ask for information reasonably necessary to verify your identity and locate the relevant data. We will not request more verification information than reasonably necessary.

Authorized agents may submit requests where permitted by applicable law, but we may require evidence of their authority.

13. Rights of another conversation participant

You may have privacy rights even when you do not have a Vermilleon account.

If you believe a conversation containing your messages has been uploaded, you may contact [email protected] to:

ask whether we process your information;
request access to available information about you;
withdraw your consent;
dispute an inaccurate inference;
request restriction of processing;
request deletion; or
make a complaint.

Because Vermilleon does not independently know the real-world identity behind every name or username in an uploaded export, we may need enough information to locate the relevant conversation without exposing information belonging to other people.

This may include:

the account holder's name or username;
the platform from which the conversation was exported;
the approximate upload date;
the name or username used for you in the conversation; or
a limited example sufficient to identify the relevant material.

We will handle requests in a way designed to avoid revealing whether a particular user has an account or exposing unrelated conversation content.

A verified withdrawal of consent will stop further processing and trigger deletion of the affected conversation and analysis unless we are legally required to retain specific information.

14. International processing

Vermilleon is intended to be available internationally.

Personal information may be processed in countries other than the country where you live. Those countries may have different privacy laws.

Where required, we use legally recognized safeguards for international transfers, which may include:

contractual data-protection clauses;
transfer assessments;
provider security commitments;
data-minimization measures;
encryption; and
additional technical or organizational safeguards.

You may contact [email protected] for more information about applicable transfer safeguards.

15. No sale or behavioral advertising

Vermilleon does not:

sell personal information;
rent uploaded conversations;
use conversations for targeted advertising;
share information for cross-context behavioral advertising; or
track users across unrelated apps and websites for advertising purposes.

Where applicable law defines "sale" or "sharing" more broadly, you may contact [email protected] with questions or requests concerning those activities.

16. Children

Vermilleon is only available to people aged 18 or older.

Users must not upload conversations involving anyone under 18.

We do not knowingly create behavioral analyses or profiles of children. If we learn that information concerning a child has been uploaded, we will delete it and may suspend the account responsible for the upload.

A parent, guardian, or affected person may contact [email protected] to report information involving a child.

17. User responsibilities

You are responsible for:

obtaining valid consent before uploading a conversation;
ensuring the uploaded export does not include people who did not consent;
accurately describing what Vermilleon will do with the conversation;
providing the other participant with access to this Privacy Policy;
respecting a participant's withdrawal of consent;
protecting access to your Vermilleon account;
using generated results carefully and lawfully; and
not presenting automated interpretations as established facts.

You may not use Vermilleon to secretly monitor, investigate, rank, punish, manipulate, deceive, discriminate against, threaten, or control another person.

Your confirmation that consent exists does not prevent Vermilleon from investigating a complaint, deleting information, restricting processing, or suspending an account.

18. Changes to this policy

We may update this Privacy Policy when Vermilleon's services, practices, or legal obligations change.

When we make a material change, we will:

update the "Last updated" date;
provide reasonable notice through the app, website, or account contact information; and
obtain consent where required by applicable law.

Materially different processing will not be justified merely because a person continued using the service where applicable law requires new consent.

19. Complaints

Depending on your location, you may also have the right to submit a complaint to your local privacy, consumer-protection, or data-protection authority.

20. Contact us

For privacy questions, consent withdrawals, access requests, deletion requests, or complaints:

Email: [email protected]
Controller: [LEGAL ENTITY NAME]
Registered address: [REGISTERED ADDRESS]
Country: [COUNTRY]
Privacy representative or Data Protection Officer, if applicable: [NAME OR CONTACT]

For general product support:

Email: [email protected]