1. The short version
- We collect what you give us — for example when you request a consultation, apply to be a partner or write for the site — and, only if you agree, how you use the site.
- We use it to respond to you, to run the partner portal and contributor accounts, and to improve the site. We do not sell personal information.
- Nothing analytical is collected before you choose, and “Reject non-essential” is a real refusal. You can change your choice at any time from Cookie settings.
- You can ask to see, correct or delete your information by writing to privacy@vepict.com.
2. Who we are
VEPICT is an offering of Pyroelectric Incorporated (“we”, “us”). This statement covers the VEPICT website at www.vepict.com, including its partner portal and the sign-in used by invited contributors. For the personal information described here, Pyroelectric Incorporated is the controller (or “business” or “data fiduciary”, depending on the law that applies). Consultations and implementations may be delivered with certified VEPICT implementation partners, who act on our instructions for the purposes described here.
When customers use the VEPICT platform to process their own data, they are the controller of that data and we act as their processor under their agreement with us. That processing is governed by the customer agreement, not by this statement.
3. What we collect
3.1 Information you give us
- Consultation requests: name, work email, organization, job title, phone (optional), industry, the business challenge you describe, the systems you select, and which page or button you came from.
- Contributor accounts (invited writers): name, email, role, password (stored only as a one-way hash), the second factor you choose (authenticator app, passkey or device PIN — the secrets are encrypted or held only on your device), and the content you write and upload.
- Partner portal: your firm’s details, the people you register, agreement signatures and their evidence, registered opportunities, training and exam results, and the sign-in details above.
- Messages you send us by email or through the site.
3.2 Information collected automatically
- Always: the technical information any web server receives — IP address, browser, the page requested and the time — used for security, abuse prevention and to keep the service running. We also record each cookie decision, including refusals, with its time, page, IP address and browser string, so we can show a refusal is honored.
- Only with your consent: page views, time on page, approximate location derived from your IP address, device and browser type, language, screen size and the site or campaign that referred you.
3.3 Information kept only in your browser
Your progress in the data maturity challenge and the spot-the-hidden-potential game is stored in your own browser and is not sent to us unless you choose to share your result with a consultation request.
4. How we use it, and our legal bases
| Purpose | Legal basis (where the GDPR or similar laws apply) |
|---|---|
| Responding to consultation requests and arranging conversations | Steps you asked us to take before a contract; our legitimate interest in responding to business enquiries |
| Running partner and contributor accounts, sign-in and security | Performance of our agreement with you; legitimate interest in keeping accounts secure |
| Partner agreements, deal registration, commissions, training and certification | Performance of the partner agreement; legal obligations (for example tax and records) |
| Analytics to improve the site | Your consent, which you can withdraw at any time |
| Security, fraud and abuse prevention, and keeping consent records | Legitimate interest; legal obligations |
We do not use your information for automated decisions that have legal or similarly significant effects on you.
5. Cookies and storage
We use strictly necessary storage to run the site and remember your choices, and analytics only if you agree. The full list — names, purposes and how long each lasts — is in our Cookie notice. You can change or withdraw your choice at any time using Cookie settings.
Our pages load fonts from Google Fonts, so your browser sends your IP address to Google when it fetches them.
6. Who we share it with
We share personal information only as needed for the purposes above, with:
- Service providers that host and operate the site for us — cloud hosting and databases, email delivery and, for partner training, the AI provider that writes and marks exams — under contracts that limit their use of the data to our instructions;
- Certified VEPICT implementation partners, to respond to consultation requests and deliver engagements;
- Partners, where you ask to be introduced to one or a partner registers an opportunity involving your organization;
- Authorities, where the law requires it, and professional advisers under confidentiality;
- a buyer or successor, if our business is reorganized or sold, under equivalent protections.
We do not sell personal information and do not share it for cross-context behavioral advertising.
7. International transfers
We and our service providers may process information in the United States and other countries. Where the law requires it, we protect transfers with appropriate safeguards, such as standard contractual clauses approved by the European Commission and the UK addendum.
8. How long we keep it
| Information | Kept for |
|---|---|
| Consultation requests | Up to 3 years after our last contact, unless you ask us to delete them sooner |
| Author accounts and their sign-in records | While the account is active, then up to 12 months |
| Partner records, agreements and signatures | For the partnership and the period the law requires afterwards (typically 7 years) |
| Consented analytics | Up to 26 months |
| Cookie consent records | Up to 5 years, to demonstrate compliance |
| Server and security logs | Up to 12 months |
9. Security
We use encryption in transit, encryption of authentication secrets at rest, one-way hashing of passwords, required second-factor sign-in for partners and contributors, rate limiting, least-privilege access and audit records. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information; to object to or restrict certain processing; to withdraw consent; and not to be discriminated against for exercising these rights. To exercise them, write to privacy@vepict.com. We will verify your request and respond within the time the law allows. You can use an authorized agent where the law permits.
11. Region-specific information
European Economic Area, United Kingdom and Switzerland
You may complain to the supervisory authority where you live or work, or where you think an infringement happened — in the UK, the Information Commissioner’s Office. We would appreciate the chance to address your concern first.
United States, including California
In the last 12 months we have collected identifiers, professional information, commercial information (such as partner opportunities), internet activity (only with consent), approximate geolocation and account credentials, for the purposes in sections 4 and 6. We do not sell or share personal information for cross-context behavioral advertising, and do not knowingly do so for anyone under 16. Sensitive personal information, such as account credentials, is used only for permitted purposes like signing you in. We honor Global Privacy Control signals as a request to opt out of sale or sharing.
India
Under the Digital Personal Data Protection Act, 2023, you may access, correct, complete or erase your personal data, withdraw consent, nominate another person to act for you, and raise a grievance with us at privacy@vepict.com. If we do not resolve it, you may approach the Data Protection Board of India.
Kingdom of Saudi Arabia
Under the Personal Data Protection Law, you have the right to be informed, to access and obtain a copy of your personal data, to correct it, and to request its destruction when it is no longer needed. You may raise a concern with us and with the Saudi Data and AI Authority (SDAIA).
Other jurisdictions
If you live somewhere with equivalent rights — for example Canada, Australia, Brazil, the United Arab Emirates or Singapore — those rights apply in full, and you can exercise them the same way.
12. Children
This website and our portals are for businesses and the professionals who work in them. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
13. Third-party names and trademarks
VEPICT and TRANXACT are trademarks of Pyroelectric Incorporated. Other product and company names mentioned on this site — such as Epic, Infor, SAP, Microsoft, Amazon Web Services, Google Cloud and Apache — are the trademarks of their respective owners and are named only as publicly known examples of systems VEPICT can work with. Naming them does not imply any affiliation, sponsorship or endorsement.
14. Changes to this statement
We update this statement as our services, the law and our practices change; the version and effective date are at the top. If a change materially affects information we already hold, we will announce it here before it takes effect and, where we have a relationship with you, tell you directly. Changes to our cookie practices prompt the cookie banner again.
15. Contact us
Pyroelectric Incorporated (VEPICT)
Privacy: privacy@vepict.com
General enquiries: info@vepict.com