Vesper Sync is a cloud service. When you create a Vesper Sync account, we store your notes, images, and tags on our servers. We store only as much data as is necessary to provide the service.
We never share your personal data, including your email address, with outside third parties.
We may disclose your information in response to subpoenas, court orders, or other legal requirements; to exercise our legal rights or defend against legal claims; to investigate, prevent, or take action regarding illegal activities, suspected fraud or abuse, violations of our policies; or to protect our rights and property. Q Branch is a U.S. company.
We offer an opt-in email newsletter, through which we send occasional updates about new and updated Q Branch products. You can subscribe or unsubscribe at any time from the Sync settings screen in Vesper.
Otherwise, we will only send you email for the following purposes:
If you would like to permanently delete your account, contact Q Branch customer support.
The text of deleted notes is deleted on the server. However, that text may exist in our database backups.
We take security seriously, and use several measures to protect your data. To start, all communication between the app and our sync servers takes place using HTTPS. Passwords are never stored on our servers. Instead, we use a modern secure password hash. If you ever forget your password, we cannot send it to you; you will need to reset it. Passwords are stored on your device, in the keychain.
The text of all notes is stored encrypted on the server. Tags, attachments, and other data and metadata are not encrypted. Though it’s theoretically possible for Q Branch to read the decrypted note text or view image data, we don’t have a mechanism in place to do that, and we won’t create a mechanism unless legally ordered.
We have no plans to sell our company or Vesper, but plans can change. We reserve the right to sell to, buy, merge with, or partner with other businesses. In such transactions, user information may be among the transferred assets, but if it is, we will state so publicly, and offer you the opportunity to delete your account.
This policy was last modified on 27 May 2014.