Privacy Policy
Last updated: 10 November 2026
VNC AI Solutions (“we”, “us”) is based in the United Kingdom. This policy explains how we handle personal information when you use vncaisolutions.com, when you contact us, and when you use our products, including MerchantGuard for Wix. Questions can be sent to vncaisolutions@gmail.com.
Who we are
VNC AI Solutions builds software products and provides AI-related services. Vinny Chagas is the founder. For privacy requests, email vncaisolutions@gmail.com.
Information this website collects
- Email you send us. If you write to vncaisolutions@gmail.com, we receive your email address, your message, and any details you choose to include. We use that information to reply and to keep a record of the conversation.
- Contact form. The form asks for your name, email address, and message. We email that message to vncaisolutions@gmail.com through Resend so we can reply. Do not include confidential information.
- Usage data. This site loads Google Tag Manager and Google Ads. Those services may collect technical data such as your IP address, browser type, pages viewed, and approximate location, and they may set cookies or similar identifiers. Google Fonts is also loaded from Google’s servers so the site can display its typeface.
Why we use it
- To answer enquiries and, where relevant, to discuss or deliver services you ask for.
- To understand how the website is used and to measure advertising. Google’s tools process this data under their own terms. You can read Google’s policy at policies.google.com/privacy and manage ads settings at adssettings.google.com.
- To keep the site secure and to meet legal obligations.
Where UK data protection law applies, we rely on legitimate interests to respond to messages and to run the site, and on steps toward a contract when you ask about our services. Advertising and analytics cookies may require your consent under UK cookie rules. You can block cookies in your browser.
FoodMap AI
FoodMap AI is our Chrome extension for checking FODMAP content and nutrition information. When you use it, the text you highlight or the food image you choose to analyse is processed so the extension can return a result. That output is general information, not medical advice. The Chrome Web Store listing for the version you install describes the permissions and data that version uses. Email us if you want a copy of the data we hold about you in connection with the product.
MerchantGuard for Wix
MerchantGuard is our app for Wix sites, installed from the Wix App Market. It is used by the business that owns the Wix site (“the merchant”).
Enquiry, order, discount code and booking checks
LeadGuard, OrderGuard, PromoGuard and CalendarGuard check form submissions, orders, discount codes and bookings on the merchant’s own site. They run inside Wix, and their settings and results are stored in the site’s own Wix CMS. They do not send this data to us or to any other service. Wix’s privacy policy covers how Wix stores it.
Clone Store Detector
Clone Store Detector looks for websites that copy the merchant’s store. It reads public web pages only: the merchant’s published Wix site and websites that might be copies of it. It never reads the site’s orders, contacts, form submissions, members or payment details, so no shopper or customer data leaves Wix for this feature.
What it uses
- From Wix: the site’s published address, the site’s display name, the app plan, and the Clone Store Detector settings the merchant enters (store name, other domains, allowed sites, sites to check, alert email address and alert threshold). Settings, findings and takedown report drafts are stored in the site’s own Wix CMS.
- From the merchant’s public store: the text, title and prices of the home page and up to two other public pages, digital fingerprints (hashes) of up to 14 of the store’s own images, and one screenshot of the top of the home page.
- From websites that may be copies: the public page, its title and text, fingerprints of up to 15 of its images (we do not keep the images), and, for sites that look like a likely match, a screenshot of the top of the page. We also look up public records about the website’s domain: when it was registered, the registrar and its abuse contact, whether the owner’s details are hidden, its IP address, and its hosting provider and abuse contact.
Our scanner makes ordinary, signed-out visits to these public pages and identifies itself as MerchantGuard-CloneCheck/1.0. It does not log in, fill in forms, or contact the people who run those websites. Takedown reports are drafted for the merchant to send from their own email. We never send them.
Services that process this data for us
- OpenAI (United States) runs two checks.
- Web search: OpenAI receives the store name, the store’s own domains and a search phrase such as “[store name] online shop”, and returns links to possible copies.
- AI comparison check: for possible copies that already score highly, OpenAI receives the store name and domain, the other website’s domain and page title, up to 2,500 characters of that website’s public page text, and simple match figures (how many images match, how much text overlaps, whether it has a checkout, and which payment providers it shows). This check runs only on Protect Plus scans, not on the free one-off scan.
- Netlify hosts the scanner. Its stored data is kept in the European Union (Frankfurt, Germany) in Netlify Blobs: the store fingerprint described above, the screenshots, scan results, scan history and usage counters. The scanner’s functions that read and write this data run on Netlify in the United States. Screenshots are shown to the merchant through private links that expire after 30 days.
- GitHub (Microsoft, United States) runs the scans on GitHub Actions in a private repository. Scan logs are kept for 90 days. They contain the site’s app ID and scan totals, and an error message can include the web address that failed.
- Resend (United States) sends clone alerts and the weekly digest from alerts@mail.vncaisolutions.com. These are sent only on Protect Plus, and only if the merchant enters an alert email address. Resend receives that address and the email: the store name, the domains of the possible copies, their match scores and the reasons for them.
- Public lookup services: Cloudflare DNS (1.1.1.1), crt.sh and rdap.org. They receive domain names that look like the store’s, words from the store’s name or domain, and the IP addresses of possible copies, so we can check certificates and registration records. They receive nothing about the merchant beyond those words and domains.
How long Clone Store Detector data is kept
- 30 days. Screenshots, the text of the merchant’s pages and other scan records (page checks, search and lookup results, scan history) are deleted automatically once they are 30 days old. A daily clean-up deletes them. While clone watch is on, a scan may capture them again, and the new copy is deleted 30 days after it was taken.
- We keep the record that the store is enrolled (site address and plan), the record that the free scan has been used, and this month’s and last month’s usage counters until the app is uninstalled.
- Uninstalling deletes everything we hold for the site. When the merchant removes MerchantGuard, Wix tells our app, and the scanner deletes that site’s stored data and screenshots straight away. There is no grace period. If a deletion fails, it is retried every day until it succeeds, and the site is not scanned in the meantime. Public registration records about other websites’ domains are cached by domain, contain nothing about the merchant, and are also deleted after 30 days.
- Data in the site’s own Wix CMS (settings, findings and report drafts) stays in Wix and is handled under Wix’s rules.
- Copies held by our providers follow their own retention: up to 30 days at OpenAI, 90 days for GitHub scan logs, and the email log retention at Resend.
A merchant can ask us to delete their Clone Store Detector data at any time by emailing vncaisolutions@gmail.com from the address on their Wix account.
Why we process it. We use the merchant’s data to provide the service they installed (contract). Some public information about other websites may relate to the people who run them, such as a registrar abuse contact or a site run by an individual. We process it on the basis of legitimate interests: to protect the merchant and their customers from impersonation and fraud. We keep it to the minimum the check needs. If you run a website flagged by MerchantGuard and want to ask about the data we hold, email us.
How long we keep it
We keep enquiry emails for as long as we need them to respond, to maintain a record of a client relationship, or to meet a legal requirement, and then we delete them. Server logs and analytics data are kept according to the settings of the tools that collect them. MerchantGuard retention is described in the MerchantGuard section above.
Who we share it with
We do not sell your personal information. We use Google (Tag Manager, Ads, and Fonts) and Netlify (hosting) to operate this website. Resend sends the website contact form to our email inbox. For MerchantGuard we use Wix, OpenAI, Netlify, GitHub, Resend and the public lookup services listed in the MerchantGuard section. If you email us, your message is stored in that email account and by the email provider. Those providers may process data outside the United Kingdom. Where that happens, we rely on the provider’s international transfer safeguards, such as the UK extension to the EU-US Data Privacy Framework or standard contractual clauses. MerchantGuard’s stored scan data is kept in the European Union.
Your rights
If UK GDPR applies to you, you can ask us to:
- access the personal information we hold about you
- correct it
- delete it
- restrict or object to how we use it
- provide a copy in a portable format, where that right applies
Email vncaisolutions@gmail.com. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Children
This website is not directed at children under 13, and we do not knowingly collect their personal information.
Changes
We will post updates on this page and change the date above.