VPO Privacy Policy

Last updated: 1 November 2026. VPO is run by DROM Research, who decides how this data is used. Contact: bogdan@vpo.studio.

What we keep

• Account: your email and a protected form of your password.
• Your character: the look, height and build you choose. People in VPO can see them.
• Things you upload: photos in frames, documents on the virtual printer, and your face texture if you scan your face. These are readable by anyone who has their link, and people in VPO can see them.
• Agents you connect: your AI key, your email app password, your calendar link, documents you add, client notes, meeting notes, messages left with your receptionist, your writing style notes and short notes about your contacts, stored encrypted.
• Technical data: basic server logs, needed to run and protect the service.

What we do not keep

• Camera: the face scan runs in your browser. The camera image never reaches us, only the finished face texture if you choose to use it.
• Voice and shared screens: these go directly between participants and are not recorded by VPO.
• Your own window views: images you add for your windows stay in your browser.

Why we use it

To run your account and the features you choose. We rely on our agreement with you to provide the service, on your consent for optional features such as the face scan and connected agents, and on our legitimate interest in keeping the service secure. We do not sell your data and do not show advertising.

Who else receives data

• Hetzner Online GmbH hosts the service in Germany.
• Your AI provider (Anthropic or OpenAI, whichever you choose) receives what your agents process, under your own account with them: emails, calendar entries, parts of your documents, notes and meeting text, and what visitors say to your receptionist. This can include personal data of other people.
• Your email provider, which your agent connects to with the password you give.
• Google Fonts supplies the typeface, so your browser contacts Google when the page loads. Calls use a Google server to help connect participants.

How long we keep it

Until you delete it or delete your account. Deleting your account removes your account, AI key, email connection and agent memory straight away. Removing a photo from a frame deletes its file. Your face texture and other uploads may need a request by email to be deleted.

Your rights

You can ask to see, correct, delete or move your data, object to its use, or withdraw consent, by writing to the address above. You can complain to the UK Information Commissioner's Office or to your local data protection authority.

Security

Keys and agent data are encrypted, and connections use HTTPS. No online service is perfectly safe, so use a unique password and an email app password that you can revoke.