Privacy Policy

Who we are

V.E.Y.R is software operated by you on your own instance. This policy describes how the V.E.Y.R software and the services that support it (together, "V.E.Y.R", "we") handle information. Questions: support@dcstechsolutions.ca.

What we collect and where it lives

• Accounts you connect (for example, Instagram). When you authorize Instagram, we receive an access token and your public professional-account profile (username, name, follower and media counts) and, with your permission, the media, comments and messages needed for the features you use. This is stored on your own V.E.Y.R instance. Our sign-in service performs the confidential token exchange and does not retain your token afterwards.
• The account you create on your instance. Your login email and settings live on your instance.
• Operational logs on your instance (for example, messages you send or automations you run) so the product can show you your history. These live on your instance.
• What your instance sends us. A random install id and the public half of the key your install signs with, the installed release and update channel, the sharing level you chose, licence counts (how many systems, agents and modules), your licence tier and kind and, for a bought key, the key's opaque id (never the key itself), and the update state of your install (which release the web console runs, the last update applied and its date, whether an update was interrupted). That lets us match your install to your purchase for support and, if a key is revoked, stop it unlocking. At the default sharing level it also sends one word of health (ok or degraded) and how many checks passed, warned or failed, as counts only; you can lower the level to licensing only on the console's Telemetry page. If you choose the managed level, it also sends, for each edge device you run, a short code derived from its id plus its status word, platform class and agent release. The fleet-learning level is reserved: today it sends nothing beyond the default level. It never sends names, email addresses, network addresses, device names, file names or your content. The full list of fields is published in the product documentation and enforced in code on both ends: a field outside that list is refused by your install and, if it ever arrived, stripped by us before it is stored.
• What we keep of it. One record per install, holding only the newest report; the next report overwrites it. We keep no history of reports, we store no failure shapes, and we do not use anything your install sends to train models. Our operations records are version-controlled, so an overwritten record can remain in that history until we remove your install's record, which we do when you ask. On a self-hosted install you can switch the dial-home off entirely (set VEYR_NET_URL to off); your install keeps working within its last valid licence.

The 4G stick and our service

The V.E.Y.R 4G stick holds your SIM. It links to a home: either a small private home we run for you on a server in Canada ("our service"), or your own veyr. Here is what each part keeps.

• Your texts. Texts travel between your stick and your phones through your home's encrypted tunnel. Our service never stores a text: its code drops any text before anything is written. Codes you reveal in the console are fetched from your stick when you ask, and only the fact that someone revealed a code (who and when, never the code) is kept in your console's own audit trail.
• What your home on our service keeps. Your console's sign-in (your sign-in name, your email, a scrambled form of your password, your authenticator setup and recovery codes), the phones and computers you pair, their VPN keys, your sticks and their line status (carrier, signal, connection), which updates they run, and an audit trail of sign-ins and of who opened a stick's page and from which internet address. It lives in your home's own storage, separate from every other customer's.
• The VPN. Your phone's and computer's internet leaves through your own stick, never through our server's internet. On the way it passes through your home's tunnel on our server. We keep no list of the sites you visit; your console shows when each device last connected.
• What the stick sends. Once linked, the stick reports its health, signed, to its home and nowhere else: its line status, its updates and its version. On our service that home is run by us, so we can see those reports; on your own veyr we see nothing. The stick checks for updates on our update channel without saying anything about itself.
• Your order. Stripe takes the payment and keeps your shipping address; we do not copy it. We keep your order number, your name and your email to ship your stick, link it to your service and remind you before your included year or your plan ends. Our order, setup and reminder emails are sent through our email provider with open and click tracking off.
• The stick itself. For each stick we keep its serial number, its modem identity (IMEI), its public keys, a scrambled form of the claim code on the card in its box, which order it belongs to, when it first linked to a home (its included year counts from then), and a copy of its radio calibration so we can repair it. These describe the device, not you.
• Backups. Your home on our service is backed up every night, encrypted, to our backup provider. Backups expire within 7 days.
• Who could read it. Whoever runs the server, which is us, could, with effort, read your home's VPN keys and pairing details. That is why no text is ever kept there.
• On the stick. Your stick keeps your settings, your saved Wi-Fi passwords and its keys. Its storage is not encrypted: someone holding your stick with special tools could read it. If you lose it, report it lost from your console and change your Wi-Fi password. A factory reset erases your settings and links.

If your plan is not renewed. Your stick includes one year of our service; after that a plan keeps your home running. If neither covers your home, everything keeps working for 30 days, then our service for your home pauses. While it is paused we keep your home and its data unchanged for 30 more days, and nothing on your stick is touched. Then we remove your home as below, after a final email 7 days before. Renew any time before that and nothing is lost.

Ending our service. When your service ends we delete your home: your console, its sign-ins, your paired devices and their keys. Ask us first and we send you a copy. Backups of it expire within 7 days after. To delete your order details as well, write to us; we keep only what tax law requires for a sale.

How we use it

• To show your insights, posts, comments and messages inside your console.
• To perform the actions you ask for: publishing, replying, sending direct messages, running automations.
• We do not use your content to train models, and we do not sell or rent your data.

Sharing

We share data only with the platform you connected (for example, Meta / Instagram) to perform the actions you request, and with the providers that run parts of the service for us: Stripe for payments, our email provider for order and account emails, our server and backup providers for our service, and the network that serves this website. We do not share your data with advertisers.

Retention and deletion

Because your data lives on the instance you control, you delete it: open your V.E.Y.R Creator console, go to Connected accounts, and disconnect the account. This removes the token and synced content immediately. You can also remove V.E.Y.R from Instagram under Settings, Apps and websites, which voids the token. See our data deletion page for details.

Security

Connections use TLS. Access tokens are held only on your instance. Our sign-in service holds the app secret required for the token exchange and never ships it to instances.

Children

V.E.Y.R is not directed to children under 13 (or the age required in your region) and we do not knowingly collect their data.

Changes

We will update the date above when this policy changes. See also our Terms of Service.