Legal
Legal
Two documents govern this website, and a further set governs a paid engagement. Everything is here rather than buried, and none of it is written to be unreadable.
Website
Privacy policy
What happens to information on vanelytics.com. The short answer is almost nothing: this site sets no cookies, runs no analytics, carries no advertising or tracking pixels, has no form or login, and makes no third-party request of any kind — the fonts are self-hosted, so not even Google sees your IP address. The policy says so in detail, discloses the one place information does reach someone else, and explains separately how we treat data inside a client engagement.
Terms of use
The terms that apply to using this website — that the content is information rather than an offer, that nothing here is a binding quote or a guaranteed outcome, what you may and may not do with the site, and the usual disclaimers and limits. If you are already a client, your signed agreement takes precedence over everything on that page.
Clients
A paid engagement is governed by a signed agreement, not by the pages above. Depending on your systems and your industry, that will include some or all of the following. We will provide any of them on request, before you sign anything.
- Master services agreement — scope, price, timeline, ownership of the infrastructure and the data, and liability.
- Data processing addendum — the data protection terms required of a service provider under the California Consumer Privacy Act and the comparable state privacy laws: purpose limitation, no selling or sharing, no use of your data to train AI models, assistance with consumer rights requests, subprocessor controls, and return or deletion of your data when the engagement ends.
- Information security program — our written security program, including access control, multi-factor authentication, encryption, monitoring, subprocessor oversight and incident response. This is what a vendor security questionnaire asks for, and we would rather hand it over than fill in a form about it.
- Sector-specific terms — where your business sits under a specific regime. A dealership that arranges financing, for example, is a financial institution under the Gramm-Leach-Bliley Act, which requires it to bind and periodically assess service providers like us. We sign those terms and support that assessment.
On data ownership. Every engagement runs in accounts and a database that belong to you. We operate that infrastructure; we do not hold your data inside a Vanelytics-owned product, and there is no copy of it in a platform of ours you cannot see. If you walk away, the system and its history stay with you.
Questions
Anything on this page, or a document you would like to see before a conversation: griffen@vanelytics.com.