Skip to content
Vaslak
فاGet started free
Vaslak, with clarity

Privacy Policy

This Policy explains what Vaslak processes to provide the Service and how accounts, connections, and request execution are handled.

Effective date: August 23, 2026

1. About this Policy

Vaslak operates at vaslak.com and connects business services to AI tools. This Policy covers information processed when you visit the website, create an account or Workspace, establish a connection, or run a request through Vaslak.

If you use Vaslak for an organization, you must have authority to connect its accounts, process its data, and perform actions on its resources.

2. Information we process

  • Account and Workspace information, such as name, email address, account identifiers, memberships, and settings needed to provide and administer the Service.
  • Connection information, such as connector type, selected resources, connection configuration, and the credential, key, or token needed to communicate with a third-party service.
  • Technical, security, and usage information, such as IP address, browser or device type, request time, response status, event identifiers, errors, and information needed for security monitoring and troubleshooting.
  • Content and parameters needed to execute a request, job payloads, and results returned by a connected service or execution tool.
  • Messages and information you provide when contacting support or sending feedback.

3. Connector request execution

During connector execution, required data is requested from the connected service and the result is delivered to the destination you selected for that request.

Connector tools do not record raw MCP arguments or raw provider responses in the invocation ledger. For audit, quota accounting, security, and troubleshooting, Vaslak may retain only bounded, redacted technical metadata such as request identifiers, status, duration, result type, and record count.

4. How we use information

  • Create, administer, and secure your account and Workspace.
  • Establish requested connections and perform authorized reads, analysis, or actions on a connected service.
  • Deliver results to you or to the AI tool you selected.
  • Troubleshoot, provide support, prevent misuse, and investigate security events.
  • Measure technical performance, improve reliability, and meet legal obligations.

5. Connection credentials and security

To keep a connection available, Vaslak may retain a credential, API key, token, or related configuration. This information is handled through secret-management processes with access restrictions; protective measures may include encryption depending on the infrastructure and type of data.

No method of transmission or storage is risk-free. Select only the access needed for your intended use, keep credentials confidential, and revoke or rotate them at the source service if you suspect exposure.

6. Sharing and data transfers

We do not sell personal information. We may share necessary information with infrastructure, hosting, security, and support providers acting for us, in response to a valid legal requirement, or to protect rights and safety.

When you initiate a request, necessary data may move among Vaslak, the connected service, and the AI provider or destination software you selected. Third parties process data under their own terms and privacy policies.

7. Third-party, Google, and Cloudflare integrations

The product or connector catalog identifies which integrations are available. A connector marked “coming soon” or “under consideration” is not an active integration and does not mean Vaslak currently processes data from that service.

Google Analytics, Google Search Console, and YouTube are three independent, read-only connectors. Each connection is established only after your action and consent, through separate OAuth and within the scopes shown to you. Vaslak does not reuse one Google connector's project or grant for another; configuration_required means that provider is not yet ready for enrollment at platform level.

Cloudflare connects through OAuth by default and only after your action and consent. Vaslak stores access and refresh tokens encrypted on the server, limits access to the approved accounts, zones, and scopes, and attempts to revoke the Cloudflare grant when you delete the connection. A restricted API Token remains an advanced option and must also be revoked manually in Cloudflare after the connection is deleted.

8. Retention and deletion

Account, Workspace, connection, credential, security, technical metadata, and operational records may be retained for as long as needed to provide the Service, troubleshoot, protect security, resolve disputes, or meet legal obligations. The exact period depends on the information and operational need; Vaslak does not currently publish one fixed retention period for every data type.

Disconnecting an integration stops new access through that connection, but does not necessarily delete prior records, technical logs, or backups immediately. You may request deletion of your account or related information at info@vaslak.com. We may verify your identity and authority, and may retain limited information where required for law or security.

9. Cookies and local storage

We may use cookies or local storage that are necessary for sign-in, session continuity, security, language choice, and essential preferences.

We use Google Analytics to measure use of vaslak.com and doc.vaslak.com. The Google tag and analytics_storage load only after you choose Accept; ad_storage, ad_user_data, and ad_personalization remain denied. Google Analytics may process the page path and title, referrer, and technical browser, device, and network information under Google's policies. Your choice is stored as vaslak_analytics_consent in localStorage for that domain; clearing site data lets you choose again.

Google Privacy Policy

10. Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal information. You can also disconnect an integration and revoke its credential at the source service.

Email info@vaslak.com to exercise a right or ask a privacy question. The Service is not designed for children, and we do not knowingly collect information from children below the applicable legal age.

11. International transfers

Some infrastructure providers, connected services, or AI tools may operate in other countries. Information may therefore be processed in those countries according to your configuration and applicable laws and contracts.

12. Changes to this Policy

We may update this Policy as the product, retention practices, or legal requirements change. We will post the revised version and effective date here and provide proportionate notice of a material change.

13. Contact

Policy owner: Vaslak — Official domain: vaslak.com — Privacy, support, and data-request email: info@vaslak.com

Terms of Service