Privacy Policy
Last updated: October 2, 2026
1. Scope
This Privacy Policy describes how we handle information in two situations: (a) information we collect through our marketing website, our purchase flow, and when you contact us, and (b) personal data we process on behalf of our customers inside the hosted Valor Promotions service. Both the Operator Tier and the Command Tier are hosted by us, so the data your business puts into the service is stored on infrastructure we operate. Sections 5 through 7 explain how we handle it.
2. Information We Collect
When you purchase, create an account, or contact us, we collect the information you provide directly: name, email address, business details, and payment details handled by our payment processor. When you visit our website, we may collect basic technical information such as IP address, browser type, and pages viewed.
3. How We Use Information
We use the information we collect to fulfill your purchase, provide and secure the service, send service and purchase-related communications, provide support, and improve our website and product. We do not sell or rent your personal information.
4. Service Providers
We use third-party service providers to run the service and our business, including providers of cloud database and authentication, hosting, payment processing, email delivery, messaging and telephony, AI models, background job scheduling, and customer chat support. These providers receive only the information necessary to perform their function and are bound by their own terms and privacy practices. You can contact us for the current list of providers that handle your data.
5. Customer Data in the Hosted Service
When you use Valor Promotions, you and your business are the controller of the personal data of your own contacts and customers. We act as a service provider on your behalf and process that data only to provide, secure, and support the service. We do not sell it.
That data can include your contacts and their details, message content and metadata across the channels you use (such as email, SMS, iMessage, WhatsApp, and web chat), conversation history, AI-drafted replies and the record of related decisions and approvals, and notes and files you add. Operator Tier customers run in a dedicated instance and database; Command Tier customers share a platform with separation between customers.
We do not use customer conversations to train AI models of our own. AI providers we use process content in order to generate responses, under their own terms. AI-drafted replies are reviewed by you before they are sent unless you choose to turn on automatic sending.
6. Provider Credentials (Operator Tier)
If you are an Operator Tier customer, you give us the API keys and credentials for your own messaging, email, and AI accounts so that we can run your instance. We store them in a restricted, server-only credential store that is separate from other data and not accessible from the application’s user-facing code, use them only to operate your instance, and delete them when your account ends.
7. Health Information
The standard service is not designed for protected health information, and it is not permitted to be stored or transmitted in it. We do not represent that the standard service is HIPAA compliant. Customers in regulated health settings are handled case by case, under a separate written agreement on technology put in place for that purpose.
8. Data Retention
We retain purchase records and contact information for as long as necessary to provide support, comply with legal obligations, and resolve disputes. We keep customer data in the hosted service for as long as your account is active. When your account ends, we make your data available for export for a reasonable period (generally 30 days) and then delete it, except where we must keep it by law or for backups that are deleted on a regular cycle. Within the email assistant, the record of AI decisions and approvals is kept as a permanent record while your account is active.
9. Security
We use measures designed to protect your information, including separation of customer data, a restricted credential store for provider credentials, and limiting access to authorized people. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete the personal information we hold about you. Contact us to exercise these rights. If you are a contact of one of our customers, please direct your request to that customer, who is responsible for your data; we will help them respond.
11. Messaging & Opt-Outs
The service records and helps enforce opt-out requests. Our customers are responsible for having the consent required to message their own contacts.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new “Last updated” date.
13. Contact
For questions about this Privacy Policy, .