Privacy Policy

01.Information We Do Not Collect

Unlike traditional cloud software and SaaS dashboards, Vector Studio does not ingest or store your confidential operational data. Specifically, we do NOT collect or store:

02.Local Storage (IndexedDB, Cookies) & Encryption at Rest

When you configure an AWS connection in Vector Studio, all sensitive data undergoes client-side WebCrypto encryption before touching disk:

1. Key Derivation: Your passphrase is fed into the browser-native WebCrypto PBKDF2 function using SHA-256 with 210,000 iterations and a unique cryptographic salt per vault (conforming to modern OWASP recommendations).
2. Symmetric Encryption: The resulting key encrypts your connection secrets using AES-256-GCM with a fresh 96-bit initialization vector (IV) per entry.
3. IndexedDB Isolation: Only the encrypted ciphertext, salt, and IV are written to the browser's local IndexedDB storage (vector-studio), strictly sandboxed to your origin.
4. Local Storage & Masking Preferences: Local storage is used solely for client UI preferences, search query history, consent state, and the sensitive data masking toggle (vs_mask_sensitive), which automatically masks Account IDs, bucket names, and ARNs with •••••••••••• to prevent shoulder-surfing and safe screen sharing.
5. Encrypted Session Continuity Cookie: To maintain your unlocked session across page reloads without re-prompting on every tab switch, a temporary cookie named vs_vault_session is generated. This cookie is encrypted using a client-device entropy key with strict security parameters (SameSite=Strict; Path=/) and is never read or stored on any server-side database.

03.Stateless API Communication with AWS & Amazon Bedrock

To inspect S3 Vectors and generate embeddings, requests are signed with AWS Signature Version 4 (SigV4). If an API call routes through the Next.js server runtime, it operates as a purely stateless pass-through proxy:

• Credentials and query strings are held in volatile memory only for the duration of the individual HTTP request.
• Bedrock embedding requests (such as Amazon Titan Text Embeddings V2) are forwarded directly to the AWS Bedrock endpoint in your designated region.
• No databases, caches, disk writes, or remote loggers record your keys or vector payload contents.
• Communication between your browser, our proxy, and AWS is strictly secured via TLS 1.3 encryption.

04.Right to Complete Erasure & Universal Purge

You maintain total, unilateral control over all data stored on your device. At any time, you can invoke our universal client storage purge:

• Universal Storage Purge: Available via the Settings panel and the vault unlock gate. Clicking "Delete Passphrase & Wipe Credentials" triggers a complete wipe that drops the IndexedDB database, clears all localStorage entries, clears sessionStorage, and deletes all cookies (including vs_vault_session).
• Local History Removal: Wiping the vault immediately purges all cached vector search query histories, cached index names, and in-memory WebCrypto keys.
• Selective Removal: You may also delete individual connections or purge specific search records at any time without deleting your master passphrase.
• Browser Data Clearing: Clearing your browser's site data or cookies for this domain achieves an equivalent total purge.

05.Policy Updates, Engineering Attribution & Contact

Vector Studio is an engineering initiative developed by Techity. If we update our architectural practices or security policies, we will publish the changes directly on this page with an updated effective date.

For privacy inquiries, security questions, or disclosures, please visit our Contact Page, review our FAQ, or reach out directly to:

• Security Disclosures: [email protected]
• General Support: [email protected]