Privacy Notice

Last updated: October 26, 2026

This Privacy Notice explains how Vrymnox Systems LLC, which also does business as Vrymdor ("Vrymnox," "we," or "us"), collects, uses, and shares personal information when you visit our websites (including vrymdor.com and vrymnox.com), contact us, or use the Vrymnox Control Plane, the Central Guardian, Vrymdor Studio, or our other business services (together, the "Services"). Our Services are offered only to businesses and other organizations.

When we act for our business customers. When a business customer uses our Services to scan, monitor, or govern its own systems and AI agents, or provides materials for a studio project, we process that data on the customer's behalf and under our agreement with that customer, including our Data Processing Addendum. The customer's privacy notice, not this one, governs that data. If you have questions about it, please contact the customer.

1. Information We Collect

Information you give us.

• Account and contact information: name, business email address, company name, job title, and account credentials, including the security keys and authenticator apps you register for sign in.
• Billing information: billing address and purchase history. Payment card details are collected and stored by our payment processor, Stripe. We receive only limited information, such as the card type, the last four digits, and the expiration date.
• Project and support information: information you provide when you request a quote, sign a statement of work, send us project materials, sign our agreements electronically, contact support, or communicate with us.
• Discovery call information: what you tell us when you book a technical discovery call (your topics, company details, and time zone), the time you book, and, only if you agree when booking, the recording and transcript of the call. Zoom records and transcribes the call; we keep the transcript, encrypted, and permanently delete the recording from Zoom once the transcript is stored. Our own locally hosted model reads the transcript to prepare a requirements summary; the transcript is not sent to any outside AI service.

Information we collect automatically from our websites and dashboard.

• Device and usage information: IP address, browser type, operating system, pages viewed, links clicked, referring pages, and the dates and times of visits.
• Form protection: our public forms use Cloudflare Turnstile to tell people from automated programs. Cloudflare processes your IP address and browser signals for that check, and we receive only a pass or fail result.
• Cookies and similar technologies: we use cookies and similar tools to keep you signed in, remember your preferences, and secure the Services. We do not use third-party analytics or advertising cookies. See Section 7.

Information from our software. For business accounts, we collect administrator and user account information, usage counts (such as numbers of requests and registered AI agents), a device label (which defaults to the computer's name unless the customer sets a different one), software version and health information, and error and performance data. This technical data does not include log content, IP addresses from the customer's systems, or the content of AI agent traffic, which our software reviews on the customer's own server. If a customer turns on network self-scans or forwards security events to us, we receive those results on the customer's behalf, as described above.

Information from others. We may receive information from marketplaces you buy through (such as GitHub Marketplace), from integrations you connect (such as Zapier or n8n), from our payment processor, and from business partners and referral sources.

2. How We Use Information

We use personal information to:

• provide, activate, operate, and support the Services, perform studio projects, and prepare for and follow up on discovery calls;
• process payments, manage subscriptions and renewals, and send required notices;
• secure the Services, detect and prevent fraud and abuse, and enforce our terms;
• analyze and improve our Services, using information that is aggregated or that does not identify you where we reasonably can;
• communicate with you about your account, security alerts, and product changes, and, where permitted, send marketing (you can opt out at any time); and
• comply with law and respond to lawful requests.

We do not use our business customers' telemetry, AI agent traffic, or studio materials to train artificial intelligence models made available to anyone else.

3. How We Share Information

We share personal information only as follows:

• Service providers that help us run the business: cloud hosting (DigitalOcean), website hosting (Render), network security and form protection (Cloudflare), email delivery and calendar invitations (Microsoft), video calls and their transcripts when you agree to recording (Zoom), payment processing (Stripe), electronic signatures (DocuSign), and, for studio projects only, the AI services that write scripts, create images, and narrate videos (Anthropic, OpenAI, and ElevenLabs). The current list, with what each one sees, is at https://vrymdor.com/subprocessors. They may use the information only to provide services to us.
• Marketplaces you buy through, as needed to complete and support your purchase.
• Integrations you connect, as you direct.
• Legal and safety: to comply with law or legal process, to respond to lawful requests from public authorities, or to protect the rights, property, or safety of you, us, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Notice.
• With your consent or at your direction.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

4. How Long We Keep Information

We keep personal information for as long as needed for the purposes in this Notice, including to provide the Services, meet legal, tax, and accounting requirements, resolve disputes, and enforce our agreements. For example, we keep account information while the account is open and delete it thirty (30) days after the account closes, and our encrypted backups expire within thirty (30) days after that. We keep billing records for seven (7) years for tax and accounting purposes, and website analytics for about thirteen (13) months. Error reports are stored with personal information removed. Discovery call transcripts are kept while they are useful for our business relationship with you, and you can ask us to delete them at any time. Sign up and discovery call requests that do not become accounts are kept until you ask us to delete them. We then delete or de-identify information.

5. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, encrypted backups, multi-factor authentication, and access controls. No system is completely secure, and we cannot guarantee the security of information.

6. Your Choices and Rights

Account and marketing. You can update your account information in your account settings, and you can unsubscribe from marketing emails at any time using the link in the email.

Privacy rights. Depending on where you live, you may have the right to: (a) know what personal information we have about you and get a copy; (b) correct inaccurate information; (c) delete your information; (d) opt out of the sale of your information, targeted advertising, or certain profiling; and (e) not be discriminated against for exercising these rights. To make a request, email ernesth@vrymnox.com. We will verify your request by matching information you give us with information in our records. You may use an authorized agent, and we may ask the agent for proof of authority. If we deny your request, you may appeal by replying to our decision.

7. Cookies

You can control cookies through your browser settings. Blocking some cookies may stop parts of the websites or dashboard from working. We use cookies only to keep you signed in, remember your preferences, and secure the Services. We do not use advertising cookies or third-party analytics. We count website page views with our own analytics, hosted on our own servers, without cookies or browser storage: we keep the page address, the name of the referring website, a country, and the date, and to count unique visitors each day we combine your IP address and browser type with a random value that is deleted at the end of the day and keep only the scrambled result. Your IP address itself is never stored. If your browser sends a Do Not Track or Global Privacy Control signal, we do not count your page view at all.

8. Children

The Services are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16.

9. International Users

We are based in the United States and process information in the United States and other countries where our service providers operate. Business customers in the European Economic Area, the United Kingdom, or Switzerland may enter into our Data Processing Addendum, which provides for appropriate transfer safeguards.

10. Changes to This Notice

We may update this Notice. If we make material changes, we will notify account holders by email or through the Services before the changes take effect.

11. Contact Us

Vrymnox Systems LLC (d/b/a Vrymdor)

200 S 21st Street, Suite 400A, Lincoln, Nebraska 68510

ernesth@vrymnox.com