Apsis Vega Privacy Policy
This notice explains how Apsis Vega handles data when you use an AI assistant to work with your Apsis account. It supplements the Apsis Privacy Policy, which governs Apsis' services overall and applies in full.
Apsis Vega is provided by Apsis International AB, part of the Efficy Group.
Apsis Vega can both read from and write to your Apsis account. Write actions include importing contacts, updating profiles, managing lists, and creating and sending campaigns.
How Apsis Vega works
You start in your AI assistant. When you ask it to do something that involves your Apsis data, the assistant calls Apsis Vega, which reads from or writes to your Apsis account and returns the result to your assistant.
Your Apsis credentials are never shared with your AI assistant provider. You authenticate directly with Apsis using your own personal login.
When you connect, we issue a sign-in token to your AI assistant, which it presents each time it calls Apsis Vega. The token records which application you connected through: the Apsis Vega listing in Claude's directory, a connector you added manually in Claude, or ChatGPT.
Apsis Vega is available either as a standalone product or as an add-on for existing Apsis One customers. In both cases your data is held in an Apsis account and this notice applies in the same way.
Our role
Data held in your Apsis account is your data. You are the controller and Apsis International AB acts as processor on your instructions. The terms governing our processing on your behalf, including security measures, breach notification, audit rights and international transfers, are set out in Annex 4 of Efficy's General Terms and Conditions.
If you are an individual whose personal data appears in an Apsis account, the organisation holding that account is your controller. Please direct any request to them.
Where we process your own account and contact details in order to provide and support Apsis Vega, we act as controller and the Apsis Privacy Policy applies.
1. Data collection practices
What Apsis Vega can read
In direct response to your request, Apsis Vega can retrieve data from your Apsis account, including contact profile data such as name, email address, mobile number, date of birth, CRM ID and cookie ID, event and behavioural data, list membership, and any custom fields configured in your account. This includes both aggregate results, such as the number of contacts in a list, and individual records, such as whether a named person appears in a list.
Data is retrieved only in response to your request. Nothing is collected in advance.
What Apsis Vega can change
Apsis Vega can write to your Apsis account as well as read from it. This includes importing contacts, updating profile data, adding contacts to lists, creating and sending campaigns, and generating data exports.
Campaign sends require confirmation before they are executed.
What Apsis Vega cannot access
Your Apsis login credentials and password are never exposed to your AI assistant.
Apsis Vega does not access your AI assistant's chat history, memory, saved conversations or uploaded files.
Importing contact files
When you import a list of contacts, you upload the file to a temporary Apsis-hosted page. The upload link is single-use and expires after a short period. The file is transferred directly to Apsis and is not routed through your AI assistant provider.
Please note that if you attach a file to your AI assistant, for example a contact list or a document containing campaign content, the full contents of that file are sent to your assistant provider and handled under their terms. Where possible, ask your assistant to start an import without attaching the file, and upload it only on the temporary Apsis page.
2. Usage and storage
Apsis Vega uses the data it retrieves solely to fulfil the request you made through your AI assistant.
We do not retain the content of your conversation with your AI assistant, or the responses it generates, in our logs.
Where you use Apsis Vega to create content in your Apsis account, that content is saved in your account in the same way as content you create directly in Apsis. This includes email and campaign content drafted by your AI assistant, and content you supply yourself, for example by providing a document with campaign copy. This applies whether the content was written by you or generated by your AI assistant.
We log the calls made by your assistant to Apsis Vega, together with technical metadata including account identifier, user identifier, session identifier and an identifier of the application used to connect, for example the Apsis Vega listing in Claude's directory, a manually added Claude connector, or ChatGPT. These logs are used for statistics, debugging and service monitoring.
The application identifier is a fixed code assigned to each connection route. It is the same for everyone who connects the same way, and it identifies the application, not you. We use it to understand how Apsis Vega is used, for example how many customers connect through each route. We do not use it to grant or restrict access.
We do not use data accessed through Apsis Vega for advertising or profiling, and we do not use it to train AI models. We do not sell your personal data.
Data in your Apsis account is stored and processed in accordance with Annex 4 of Efficy's General Terms and Conditions, which governs our processing on your behalf as processor, including security measures and storage location. Where we process your own account and contact details as controller, the Apsis Privacy Policy applies.
3. Third-party sharing
Your AI assistant provider
By connecting Apsis Vega to an AI assistant, you instruct us to transmit the data described above to the provider of that assistant. That provider operates under its own agreement with you. It is not an Apsis or Efficy sub-processor and does not appear on our sub-processor list.
Before using Apsis Vega you must be aware of the data processing terms in place between you and your AI assistant provider under your subscription. Those terms, not this notice, determine what happens to data once it reaches your assistant, including:
- how long it is retained
- whether it may be used to train or improve models
- where in the world it is processed
- what deletion rights you have
Your provider's privacy policy sets out how they handle the data. For Claude, see Anthropic's privacy policy at anthropic.com/legal/privacy. For ChatGPT, see OpenAI's privacy policy at openai.com/policies/privacy-policy.
Plans from the same provider can carry materially different terms in each of these respects. We recommend using Apsis Vega only with an account whose terms you have reviewed and accepted as appropriate for the personal data in your Apsis account.
Where your provider processes data outside the European Economic Area, that transfer is made on your instruction as controller.
Our sub-processors
Our current sub-processors are published at trust.efficy.com/subprocessors, and changes are notified in accordance with Annex 4 of Efficy's General Terms and Conditions.
4. Data retention
Data in your Apsis account is retained for the duration of your agreement with us and deleted within 180 days of termination, as set out in Annex 4a of Efficy's General Terms and Conditions.
Operational logs, including the application identifier, are retained no longer than three months after termination of your agreement, in accordance with the Apsis Privacy Policy.
Disconnecting Apsis Vega does not affect data already transmitted to your AI assistant provider. Deletion of that data must be requested from them, subject to their terms.
5. Disconnecting
You can disconnect Apsis Vega at any time from your AI assistant. Disconnecting immediately ends its access to your Apsis account and does not delete any data in that account.
6. Data subject requests
If one of your contacts exercises their data protection rights, you can generate a profile export or delete a profile through Apsis Vega. Export download links are valid for a limited period. As controller, you remain responsible for responding to the individual.
7. Contact information
For questions about this notice, or to exercise data protection rights in relation to data we hold as controller: privacy@efficy.com
For data held in an Apsis account where we act as processor: contact the organization holding that account.
For questions regarding product support: customerservice.apsis@efficy.com
Last updated: 2026-10-07