Privacy Policy

Who this policy covers

This policy applies to three groups of people:

• Customers: companies that sign up for Vypecorp and the administrators who manage their workspace.
• Employees: people invited to a customer's workspace, whether they use the app, the web, WhatsApp or SMS.
• Visitors: people who browse this website or fill in the signup or contact forms.

Roles: controller and processor

For employee data inside a workspace, the customer company is the data controller and we act as its processor. We use that data only to run the service on the customer's instructions. For website visitors and customer account details, we are the controller.

Data we handle

• Employee profile data provided by the customer or its HRMS: name, phone number, work email if any, employee ID, department, location, role, preferred language, date of birth and joining date.
• Content: posts, comments, cheers, kudos, announcements, documents and event details created in the workspace.
• Delivery and read data: when an announcement was delivered, opened and confirmed, and through which channel.
• Survey responses: ratings and comments submitted to pulse surveys.
• Technical data: device type, app version, log data and approximate location derived from IP address, used for security and troubleshooting.
• Form data from this website: name, work email, company details and the message you send.

Anonymous surveys

Pulse survey answers are anonymous. Results are shown only for groups of at least 5 people, smaller groups are combined, and individual answers are never revealed to the customer, its administrators or its managers. There is no setting that changes this.

How AI is used

• AI summarises themes from survey comments and suggests next steps. It does not identify who said what.
• AI drafts translations of announcements and answers questions from documents the customer uploads, showing the source used.
• Customer content is not used to train general-purpose AI models.

What we never do

• We never sell employee or customer data.
• We never use workspace data for advertising.
• We do not build individual engagement scores. Engagement insights are about teams and are not designed for disciplinary decisions.

WhatsApp and SMS delivery

When a customer chooses WhatsApp or SMS delivery, the employee's phone number and the message content are shared with the messaging provider solely to deliver that message. Employees can stop receiving messages on a channel by replying STOP or by asking their employer.

Security

• Data is encrypted in transit using TLS and encrypted at rest.
• Access to production systems is limited to authorised staff, protected by multi-factor authentication and logged.
• Workspaces are logically separated so one company cannot access another company's data.

Retention

Workspace data is kept for as long as the customer's subscription is active. When a customer closes a workspace, data is deleted within 90 days, except where the law requires us to keep records. Customers can export their data before closing.

Your rights

Employees who want to access, correct or delete their data should first contact their employer, who controls the workspace. We will help the customer respond. Website visitors can write to us through the contact page.

Cookies

This website uses only the cookies needed for it to work, such as the session that powers the form check question. We do not use advertising cookies.

Changes to this policy

If we make material changes, we will tell customers by email and in the product before they take effect.