Vermilion Bridge Privacy Policy

Last updated: October 12, 2026

This policy explains what information Vermilion Bridge handles. Vermilion Bridge is an internal tool operated by Vermilion Consulting, Inc., doing business as Vermilion Collection ("Vermilion", "we"). It is used only by Vermilion's owner and team members whom Vermilion has invited. For our online store, see our store privacy policy.

Information we receive from Google

When you sign in, Vermilion Bridge asks Google only for the "openid" and "email" permissions. Google tells us your Google account email address and confirms that you control it. We use the Google authorization once, at sign-in, to read your email address. We do not store your Google access token, we never see your Google password, and we do not request or access your Gmail, Google Drive, Calendar, contacts or any other Google data.

Information we keep

  • Access list: your email address, the name Vermilion entered for you, the permission groups assigned to you, and when and by whom you were added.
  • Sign-in sessions: access tokens issued by Vermilion Bridge to your AI assistant, linked to your email address. They expire automatically and are cancelled immediately if your access is removed.
  • Activity records: which tool was used, by which account, when, and whether it succeeded. Records list the names of the inputs, not their contents, and are deleted automatically on a rolling basis.

How we use it

We use this information only to decide who may use Vermilion Bridge and which tools they may use, to keep the service secure, and to troubleshoot problems. We do not use it for advertising, we do not sell it, and we do not share it with third parties, except service providers needed to run the network connection to the service, or where required by law.

Vermilion Bridge's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

The information is stored on a computer controlled by Vermilion in the United States. Connections to Vermilion Bridge are encrypted (HTTPS), and secrets are kept in the operating system's protected keychain.

Your choices

You may ask us at any time to remove you from the access list; your sign-in sessions end immediately. You can also remove Vermilion Bridge's access from your Google account at myaccount.google.com/permissions. To ask what information we hold about you, or to have it deleted, contact us below.

Changes

We may update this policy and will change the date above when we do.

Contact

Vermilion Consulting, Inc. (Vermilion Collection)
324 South Diamond Bar Boulevard, #601, Diamond Bar, CA 91765, United States
hello@vermilion.cc