This Privacy Policy describes how VonCot Solutions LLC (“VonCot,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information in connection with voncot.ai, app.voncot.ai, and the VonCot partnership-intelligence and co-sell platform (together, the “Services”).
VonCot is a B2B product for AWS Partner Network ISVs and their authorized users. It is not directed at consumers or children.
If you subscribe through AWS Marketplace under the Standard Contract for AWS Marketplace (SCMP), that contract — including its Privacy and Security Terms and Data Processing Addendum — also governs how we handle Customer Data (called “Buyer Data” in the SCMP). If this Policy and the SCMP conflict for Customer Data, the SCMP and its DPA control.
1. Who is responsible for your information
We act in two different roles. That distinction matters.
VonCot as controller
We decide how to process personal information about visitors to our websites, people who request a trial or contact us, and users of VonCot accounts (name, work email, authentication, support tickets, and similar account administration). For that information, VonCot Solutions LLC is the controller (or “business”).
VonCot as processor
When a customer organization (“Customer”) uses the platform, we process partnership, ACE, contact, campaign, and similar workspace data on the Customer’s instructions. That is Customer Data. For Customer Data we are a processor / service provider. The Customer is the controller / business. Users of a Customer workspace should send access, correction, and deletion requests for Customer Data to their organization first. We will assist the Customer as required by the SCMP DPA or other written processing terms.
We do not use Customer Data to market VonCot to third parties, to train foundation models, or to build products for other customers from that Customer’s identifiable data.
2. Information we collect as controller
Depending on how you interact with us, we may collect:
- Account and contact details — name, work email, company, role, phone number if you provide it, and similar registration fields (including the email AWS Marketplace requires on the SaaS fulfillment page).
- Authentication and security data — login identifiers, session tokens, approximate login metadata, and security-event logs.
- Commercial relationship data — plan or subscription status, AWS account identifiers needed to fulfill a Marketplace subscription, support history. If you buy through AWS Marketplace, AWS handles payment. We do not collect card or bank account numbers for Marketplace subscriptions.
- Communications — messages you send to us (email, trial requests, support).
- Website usage — IP address, device/browser type, pages viewed, and referral data on voncot.ai, collected through essential cookies and Google Analytics as described in Section 9.
We do not require and do not intend to collect sensitive personal information (for example government IDs, health data, precise geolocation, or special-category data under GDPR) as a controller.
3. Customer Data we process as processor
When a Customer connects AWS Partner Central and uses the platform, Customer Data typically includes:
- Partner profile, program, competency, funding, and similar Partner Central information the Customer authorizes through a dedicated IAM role.
- ACE opportunities, accounts, pipeline history, and related partnership records.
- Business contact records the Customer loads or that are generated in the workspace (partner sellers, AWS sellers, PSMs, PDMs, and similar professional contacts), including location and role fields used in Relationship Explorer.
- Campaign audiences, email drafts and send metadata, follow-up state, and Slack messages the Customer chooses to send through connected integrations.
- Workspace configuration, activity logs needed to operate the Service, and content submitted to AI features.
Access to the Customer’s AWS account is limited to the Partner Central–scoped IAM role the Customer deploys (one-click CloudFormation, unique external ID per tenant). We do not use that role to touch other resources in the Customer’s account.
Customer Data is stored in AWS-native infrastructure with per-tenant isolation and encryption at rest. We process it only to provide the Services to that Customer, to maintain security, and as required by law.
4. Professional contacts who are not VonCot users
Relationship Explorer and co-sell campaigns involve professional business contact data — often AWS and partner personnel who do not have a VonCot account. We process that data as the Customer’s processor, from:
- the Customer’s Partner Central / ACE records and data the Customer’s users enter;
- public or licensed professional-profile sources used for enrichment (for example company, title, location, and public LinkedIn profile information), where the Customer has enabled that feature.
We use that data only to provide the Customer’s workspace (mapping relationships, recommending co-sell motions, drafting outreach the Customer reviews). We do not sell it. We do not use it to advertise VonCot to those individuals.
The Customer is responsible for having a lawful basis to store and message those contacts. Campaign email is sent at the Customer’s direction (including via Amazon SES). VonCot does not buy consumer marketing lists to prospect those contacts for our own account.
5. How we use information
As controller, we use personal information to:
- create and administer accounts, authenticate users, and provide support;
- fulfill Marketplace or trial onboarding, including resolving the AWS Marketplace registration token;
- send service messages (security, product changes, subscription status);
- respond to requests and run the marketing site;
- protect the Services (fraud, abuse, security);
- understand how the public website is used so we can improve it;
- send product or event messages you request or that we have a lawful basis to send — you can unsubscribe from marketing at any time;
- comply with law and enforce agreements.
As processor, we use Customer Data only to provide, secure, and support the Customer’s Service, including AI features described below, and as otherwise instructed by the Customer or required by law.
6. Legal bases (EEA, UK, Switzerland)
Where GDPR / UK GDPR applies to our role as controller, we rely on:
- Contract — to create your account and provide the Services you or your organization request.
- Legitimate interests — to secure the Services, understand site usage, improve the product at a general level, and communicate with business contacts who asked about VonCot, in ways you would reasonably expect and that are not overridden by your rights.
- Consent — where we ask for it (for example certain cookies, or marketing where consent is required). You may withdraw consent at any time without affecting prior processing.
- Legal obligation — when we must retain or disclose information to comply with law.
We do not rely on “vital interests” for ordinary product use. For Customer Data, the Customer determines the legal basis; our basis for processing that data is the Customer’s instructions and our processing contract (including the SCMP DPA).
7. When we share information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
We disclose information only as follows:
- Service providers / subprocessors who help us run the Services under contract, currently including Amazon Web Services, Inc. and its affiliates (hosting, storage, Amazon Bedrock, Amazon SES, and related AWS services). If a Customer connects Slack or another integration, that provider receives the data the Customer chooses to send. We require subprocessors to use personal information only to provide their service to us.
- The Customer’s authorized users inside that Customer’s workspace.
- Professional advisors (legal, accounting) under confidentiality.
- Business transfers in connection with a merger, financing, or sale, subject to appropriate protections.
- Legal — if required by law, legal process, or to protect the rights, safety, or security of VonCot, our customers, or others.
- AWS — limited identifiers needed to fulfill and meter a Marketplace subscription. AWS is not a party to the SCMP between you and us.
A current list of subprocessors is available on request at info@voncot.com.
8. Artificial intelligence
Some features (for example campaign drafts, funding-request assistance, and pattern summaries) use machine-learning models. Those features run on Amazon Bedrock in AWS. Inference is stateless. Amazon Bedrock does not use your inputs or outputs to train foundation models.
Prompts may include Customer Data the user submits or that the feature retrieves from that Customer’s workspace (opportunity context, contact fields, draft text). We do not send Customer Data to OpenAI or other non-AWS model hosts. We do not use Customer Data to train models for other customers.
Customers and users must not submit Highly Sensitive Information (as defined in the SCMP) into AI features unless we have expressly agreed in writing that a given workspace supports it.
9. Cookies and analytics
We use cookies and similar technologies that are necessary to operate the Services (session, authentication, load balancing, and security).
The public marketing site at voncot.ai uses Google Analytics 4 (property G-JJ2XCBE6FS) to understand aggregate traffic and page usage. Google may process IP address and device identifiers on our behalf for that purpose. We do not use Google Analytics Advertising Features, ad pixels, or third-party advertising networks to target ads to you on other sites.
You can block or delete cookies in your browser. Doing so may affect sign-in. You can also opt out of Google Analytics in the browser with Google’s opt-out add-on.
We do not respond to Do Not Track browser signals because there is no common standard for honoring them. You can use the cookie and analytics controls above.
10. Retention
- Account and controller data — for the life of the account and a reasonable period afterward (generally up to 24 months unless a longer legal, tax, dispute, or security period applies).
- Customer Data — for the subscription and then as the Customer instructs. After a SaaS subscription ends, we return or delete Customer Data on request in line with the SCMP (the SCMP provides a 45-day window unless the parties agree otherwise). Backup copies age out on a rolling cycle and remain isolated until deletion.
- Security and audit logs — typically at least 12 months, consistent with AWS Marketplace SaaS security expectations and our own security program.
- Marketing suppressions — we keep unsubscribe records so we do not email you again.
11. Security
We use administrative, technical, and physical safeguards appropriate to a multi-tenant B2B SaaS product on AWS, including:
- encryption in transit and at rest;
- per-tenant isolation and per-tenant IAM roles with external IDs;
- access limited to personnel who need it to operate the Service;
- logging of security-relevant events.
No method of transmission or storage is perfectly secure. If we discover a security incident affecting personal information, we will notify affected Customers as required by the SCMP, applicable law, and our incident process. Report suspected security issues to info@voncot.com.
12. Where information is stored
VonCot Solutions LLC is established in the United States. We host and process Service data on AWS infrastructure, currently in AWS regions in the United States, unless we agree a different region with a Customer in writing.
If you are in the EEA, UK, or Switzerland, that is an international transfer. For Customer Data we will work with the Customer on the transfer mechanism required by the SCMP DPA (for example Standard Contractual Clauses) before such a transfer is required. For controller data, we rely on the transfer tools permitted by applicable law, including SCCs where required.
13. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export personal information, to restrict or object to certain processing, and to withdraw consent.
- If you are a VonCot account holder or website visitor asking about data we hold as controller, email info@voncot.com.
- If you are asking about Customer Data in a workspace (ACE records, contacts, campaigns), contact the Customer organization that uses VonCot. We will support that Customer as required by our processing terms.
We will verify requests as required by law and respond within the applicable deadline. You may authorize an agent where the law allows; we may require proof of authorization. These rights are not absolute.
EEA users may complain to their local supervisory authority; UK users to the ICO; Swiss users to the FDPIC.
14. United States state privacy rights
Residents of California and other U.S. states with consumer privacy laws (including Colorado, Connecticut, Delaware, Florida, Oregon, Texas, Virginia, and others) may have rights to know, access, correct, delete, and obtain a copy of personal information, and to opt out of sale, sharing for targeted advertising, and certain profiling.
Categories we collect as controller (last 12 months), when you use the website or create an account:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, work email, company, account ID, IP address | Yes |
| Customer-records information | Name, work contact details | Yes |
| Commercial information | Subscription or trial status; Marketplace entitlement identifiers | Yes |
| Internet / network activity | Site pages viewed, session and security logs | Yes |
| Professional information | Job title and company if you provide them | Yes |
| Inferences | Limited product-usage inferences to operate the Service (not consumer credit or hiring profiles) | Limited |
| Sensitive personal information | — | No |
| Biometric, education, audio/visual, precise geolocation | — | No |
As processor we also handle identifiers and professional information inside Customer Data (including business contacts who are not users). That processing is done for the Customer, not as VonCot’s own consumer profiling or advertising.
We have not sold personal information and we have not shared it for cross-context behavioral advertising in the preceding 12 months. We do not sell or share personal information of children. We do not use or disclose sensitive personal information for purposes that require a separate “limit the use” right.
To exercise state privacy rights for controller data, email info@voncot.com with “Privacy Request” in the subject line. If we deny a request, you may appeal by replying to our decision. You will not be discriminated against for exercising your rights.
California Shine the Light: we do not disclose personal information to third parties for their own direct marketing. To make an annual request, email the same address.
15. Children
The Services are for business users and are not directed to children under 18 (or the equivalent age of majority). We do not knowingly collect personal information from children. If you believe we have, contact info@voncot.com and we will delete it.
16. Changes
We will update this Policy when our practices or the law change. The “Last updated” date will change. Material changes will be posted on this page and, where appropriate, emailed to account holders or noted in the product.
17. Contact
VonCot Solutions LLC
10924 NW 73rd St
Doral, FL 33178
United States
info@voncot.com
This Policy is a transparency notice. It is not a Terms of Service. Use of a paid Marketplace subscription is governed by the EULA on the listing (SCMP, if that is what we offer) and the Product Listing.