Vagel AI LLC Privacy Policy

1. Introduction

At Vagel AI LLC("us", "we", "our" or the "Company") we value your privacy and the importance of safeguarding your data. This Privacy Policy (the "Policy") describes our privacy practices for the activities set out below. As per your rights, we inform you how we collect, store, access, and otherwise process information relating to individuals. In this Policy, personal data ("Personal Data") refers to any information that on its own, or in combination with other available information, can identify an individual.

We are committed to protecting your privacy in accordance with the highest level of privacy regulation. As such, we follow the obligations under the below regulations:

• Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable provincial legislations
• Quebec Law 25
• the EU's General Data Protection Regulation (GDPR)
• Brazil's Data Protection Legislation (LGPD)
• California's Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) and California Online Privacy Protection Act (CalOPPA)
• Colorado Privacy Act (CPA)
• Utah Consumer Privacy Act (UCPA)
• Connecticut Data Privacy Act (CTDPA)
• Virginia Consumer Data Protection Act (VCDPA)
• Texas Data Privacy and Security Act (TDPSA)
• Oregon Consumer Privacy Act (OCPA)
• Montana Consumer Data Privacy Act
• Delaware Personal Data Privacy Act
• Nebraska Data Privacy Law
• New Hampshire Data Privacy Act
• New Jersey Data Privacy Act
• Minnesota Consumer Data Privacy Act
• Maryland Online Consumer Protection Act
• Kentucky Consumer Data Protection Act (KCDPA)
• Tennessee Information Protection Act (TIPA)
• The Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
• Indiana Consumer Data Protection Act (INCDPA)
• Iowa Consumer Data Protection Act (ICDPA)
• South Africa's Protection of Personal Information Act (POPIA)
• Switzerland's Federal Act on Data Protection (FADP)
• Saudi Arabia's Personal Data Protection Law (PDPL)

Scope

This policy applies to the Vagel AI LLC websites, domains, applications, services, and products (including Vagelintel at vagelintel.com).

This Policy does not apply to third-party applications, websites, products, services or platforms that may be accessed through (non-Vagel AI LLC) links that we may provide to you. These sites are owned and operated independently from us, and they have their own separate privacy and data collection practices. Any Personal Data that you provide to these websites will be governed by the third-party's own privacy policy. We cannot accept liability for the actions or policies of these independent sites, and we are not responsible for the content or privacy practices of such sites.

Processing activities

This Policy applies when you interact with us by doing any of the following:

• Make use of our application, research tools, and services as an authorized user
• Subscribe to our newsletter or automated industry weekly digests
• Submit user requests, search terms, or feed ingestion workflows on our terminal
• Visit any of our websites that link to this Privacy Statement

2. Personal Data We Collect

What Personal Data we collect

When you interact with our platform, subscribe to updates, make a purchase, or utilize our premium tiers, we collect the following types of Personal Data:

• Account Information: such as your email address, subscriber preferences, account tier flags, and authentication metadata.
• Operational Request Information: such as RSS feed URLs submitted for ingestion, custom watchlist selections, or parameters used to query historical entries.
• Payment Information: such as your billing address, phone number, credit card, debit card or other payment methods used to process recurring platform access.

How we collect your Personal Data

We collect Personal Data from the following sources:

From you: You may give us your Account Information, Operational Data, and feedback parameters by filling out forms, submitting search criteria, requesting feed ingestions, or corresponding with us via email. This includes Personal Data you provide when you:

• Register an email for our double opt-in Weekly Digest newsletter (subscribe);
• Submit a custom podcast RSS feed for priority transcription queueing (request feed);
• Initialize an account or purchase premium access passes on our website;
• Contact our technical support or administrative channels.

Automated technologies or interactions: As you interact with our website, we automatically collect behavioral metadata: Device Data about your equipment, and Usage Data about your browsing actions, traffic patterns, and telemetry metrics. We collect this data using privacy-first analytics nodes, server logs, and essential cookies. Please see our Cookie section (below) for further details.

Third parties: We may receive Personal Data about you from technical infrastructure partners, including:

• Privacy-respecting analytics engines (such as Vercel Analytics);
• Account state parameters, transaction records, and token identifiers from merchant-of-record networks handling checkout routing.

If you provide us, or our service providers, with any Personal Data relating to other individuals, you represent that you have the authority to do so and acknowledge that it will be used in accordance with this Policy. If you believe that your Personal Data has been provided to us improperly, or to otherwise exercise your rights relating to your Personal Data, please contact us by using the information set out in the "Contact us" section below.

Device and usage data

When you visit a Vagel AI LLC website, we automatically collect and store information about your visit using browser session cookies (small text strings which are sent by us to your device), or similar technology. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, some session-dependent premium authentication states across our routing tables may fail to resolve correctly.

We also process operational metadata information when you use our services and products. This information may include:

• Masked IP addresses and timestamps
• Web terms, referrers, or search phrases that led you to the site
• UI interaction clicks and traffic trends (via Vercel Analytics)

Data we collect from third parties

Our websites and services contain outbound informational links to alternative audio hosting hubs, streaming channels, and creator pages. The data practices of such remote operations are governed entirely by those third parties' separate privacy declarations.

Purpose and legal basis for the processing of Personal Data

We collect and use your Personal Data with your explicit consent to provide, maintain, and develop our products and services. These purposes include:

• Delivering your automated research emails and provisioning active subscription levels
• Maintaining performance logs, debugging software functions, and scaling ingestion speeds
• Verifying identity parameters and security states during user sessions
• Investigating and mitigating security incidents, script attacks, spam loops, or server resource exploitation

Where we process your Personal Data to provide a product or service, we do so because it is necessary to perform contractual obligations. All of the above processing is necessary in our legitimate interests to provide software services, maintain our product loops, and protect our platform infrastructure against fraud or server exploitation.

Third-party service providers and data processing pipeline

To maintain our technical architecture and serve on-demand research text tools, data parameters pass through specific third-party configurations:

• Database & UI hosting: User configuration metrics, authentication parameters, and email indexing preferences are securely stored in our Postgres database architecture powered by Neon and served via edge endpoints on Vercel.
• Background compute & processing: Media ingestion requests, RSS metadata collection, and background pipeline processing tasks are safely routed through our dedicated virtual private servers hosted on DigitalOcean.
• Automated analysis & transcription: Temporary data tracks are evaluated using technical machine-learning transcription endpoints provided by AssemblyAI to yield abstract text indices, keywords, and text summaries. No audio assets are stored or reproduced.
• Merchant of record & payments: Subscription tier logic, tax management, and secure invoice processing are managed entirely by our Merchant of Record partner, Lemon Squeezy. No raw credit card metadata or private billing strings are ever handled, received, or stored directly on Vagel AI LLC infrastructure.
• Communications infrastructure: Transactional alert systems, verification steps, and subscriber digests are delivered using automated infrastructure pipelines handled by Resend.
• Telemetry analytics: Baseline site performance, payload speeds, and aggregate navigational tracking are analyzed using privacy-focused, non-invasive metrics via Vercel Analytics.

International data transfer and storage

Where possible, we store and process data on secure cloud servers within the general geographical region where you reside. Your Personal Data may be transferred to, and maintained on, servers residing outside of your state, province, country or other governmental jurisdiction where the data laws may differ from those in your jurisdiction. We take all appropriate, industry-standard steps to ensure that your Personal Data is treated securely, maintaining Standard Contractual Clauses (SCCs) and adequate operational access controls across all hosting frameworks.

3. Cookies

What are cookies?

A cookie is a small text string file with unique information that your browser stores locally on your hardware device.

How we use cookies

To give you a secure, functional platform experience, we limit our data footprint strictly to Essential Session and Authentication Cookies. These parameters are used solely to preserve your premium access session state across our routing framework, prevent cross-site request forgery, and authenticate digest adjustments. We do not deploy third-party advertising tracking scripts or behavioral remarketing pixels.

4. Retention & deletion

We only retain your Personal Data for as long as necessary for the purpose for which that data was collected and to the extent required by applicable law. When an email profile becomes inactive, undergoes standard cleanup routines, or is wiped via a verified user deletion request, we completely purge the corresponding records from our Neon database systems or anonymize the data structures entirely.

5. Merger or acquisition

If we are involved in a merger, acquisition or asset sale, your personal information may be transferred. We will provide clear notice before your personal information is transferred and becomes subject to a different Privacy Policy framework. Under certain circumstances, we may be required to disclose your personal information if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

6. How we keep your data safe

We have appropriate organizational safeguards and security measures in place to protect your Personal Data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed.

The communication between your browser and our website uses a secure encrypted SSL connection wherever your Personal Data or billing verification tokens are involved.

We require any technical provider or processing infrastructure tool contracted to manage parameters on our behalf to maintain strict operational safeguards in accordance with standard regulations.

In the event of a physical data breach affecting user authentication files, we will notify you and any applicable regulator immediately when we are legally required to do so.

7. Children's privacy

We do not knowingly collect or solicit Personal Data from children under the age of 18 years. The research tools, summaries, and search functions on this terminal are intended strictly for adult professional operators and market researchers.

8. Your rights for your Personal Data

Depending on your geographical location and citizenship, your rights are subject to local data privacy regulations. These rights may include:

• Right to Access (PIPEDA, GDPR Article 15, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
• Right to Rectification (PIPEDA, GDPR Article 16, CPRA, CPA, VCDPA, CTDPA, LGPD, POPIA)
• Right to be Forgotten / Right to Erasure (GDPR Article 17, CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA, LGPD, POPIA)
• Right to Restriction of Processing (GDPR Article 18, LGPD)
• Right to Portability (PIPEDA, GDPR Article 20, LGPD)
• Right to Opt Out (CPRA, CPA, VCDPA, CTDPA, UCPA)
• Nondiscrimination and nonretaliation (CCPA/CPRA, CPA, VCDPA, CTDPA, UCPA)

Data privacy rights implementation

You do not need a paid account or complex third-party widgets to exercise your privacy protections. To request a structural copy of your profile indicators, complete removal of your email from our Postgres tables, or an immediate unsubscribe from all weekly mailing lists, please email us directly at legal@vagelai.com. We evaluate, process, and confirm all verified requests within 30 days free of charge.

9. Changes

We may modify this Policy at any time to align with legal movements or technical expansions of our processing workers. If we make changes to this Policy then we will post an updated version at this URL. When using our subscription authentication routes, you may be prompted to review and accept our modified guidelines to record your explicit confirmation.

10. Contact us

To request an information copy, unsubscribe from our email digest, request total data deletion, or submit a technical query regarding your privacy safety, please reach out directly:

Email: legal@vagelai.com

Mailing address: Vagel AI LLC Attn: Data Privacy Officer 418 Broadway #STE R Albany, NY 12207