Policy

What is Vector?

Vector is an ultra-secure web-based messaging application that uses One-Time-Pad (OTP) encryption to provide mathematically unbreakable message security. Our platform enables users to exchange end-to-end encrypted messages where the server cannot decrypt content.

Built following OWASP ASVS Level 3 security standards, Vector implements information-theoretic security through client-side encryption, ensuring perfect secrecy for your communications.

How It Works

Vector uses One-Time-Pad encryption, the only encryption method proven to be mathematically unbreakable:

• Cryptographically secure random pads are generated client-side
• Messages are encrypted using XOR operations with the pad
• Only ciphertext and metadata are sent to our servers
• Servers cannot decrypt messages—they are cryptographically blind
• HMAC-SHA256 ensures message integrity and authenticity

OTP pads are exchanged out-of-band (not through our platform) and are never reused, providing perfect forward secrecy.

Security Measures

Vector implements multiple layers of security:

• TLS 1.3 only — All connections use the latest encryption protocol
• Server-blind architecture — Servers never see plaintext or encryption keys
• ASVS Level 3 compliance — Enterprise-grade security controls
• Zero tracking — No analytics, no logs, no data collection
• Rate limiting — Protection against abuse and DoS attacks
• Input validation — Strict validation of all user inputs

Privacy Policy

We do not collect, store, or process personal data beyond what is necessary for service operation.

• Message content: We store only encrypted ciphertext. We cannot decrypt your messages.
• User authentication: Handled via Auth0. We store only Auth0 user identifiers.
• No tracking: We do not use analytics, tracking pixels, or behavioral monitoring.
• No logging: We do not log IP addresses, access patterns, or user behavior.
• No data sharing: We do not share data with third parties, advertisers, or partners.

By using Vector, you understand that message encryption is handled client-side and you are responsible for secure pad exchange.

Terms of Service

By using Vector, you agree to:

• Use the service only for lawful purposes
• Not attempt to compromise system security or integrity
• Exchange OTP pads securely out-of-band
• Not share accounts or authentication credentials
• Comply with all applicable laws and regulations

Vector is provided "as is" without warranties. We are not liable for misuse, loss of data due to improper pad management, or security breaches resulting from user error.

Fair Use Policy

Vector is designed for legitimate secure communication. Fair use includes:

• Reasonable message frequency and size
• Personal and professional secure communications
• Educational and research purposes

Prohibited use:

• Spam, harassment, or abuse
• Illegal activities or content
• System abuse or automated scraping
• Attempting to overload or disrupt the service

We reserve the right to suspend or terminate accounts that violate fair use policies. Rate limiting and security measures are in place to protect service integrity.