Privacy Notice

We design for privacy and control. This notice explains what we collect, why we use it, who helps us process it, and the choices available to you.

Controller

Vndie ("we/us"). Contact: privacy@vndie.com
Address: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP, United Kingdom.

1. What we collect

• Account data: name, email, company, role, seat/member info.
• Billing metadata: from Stripe (customer/subscription IDs, status). We do not store full card details.
• Product usage: requests, token counts, feature interactions, logs for security and metering.
• Content you submit: prompts, attachments, contacts and interactions you enter (which may include third-party personal data you control).
• Communications: support emails, advisor guidance delivery, usage alerts.
• Technical: device/browser info, IP, cookies (essential + performance).

2. Why we use it (legal bases)

• Provide and secure the Service (contract; legitimate interests).
• Billing and account management (contract; legal obligation).
• Product improvement and analytics using aggregated/de-identified data (legitimate interests).
• Advisor guidance and usage alerts (contract/legitimate interests).
• Marketing with consent where required (consent; you can opt out).
• Compliance and enforcement (legal obligation; legitimate interests).

3. Sharing & processors

We use trusted processors under contract, including:

• Stripe (payments & subscriptions)
• Amazon SES (email delivery)
• AI model providers (to generate outputs from your prompts)
• Hosting & infrastructure providers
• Analytics & logging (performance, security)

We do not sell personal data. If required by law, we may disclose information to competent authorities.

4. International transfers

Some processors may be outside the UK/EEA (e.g., the United States). Where applicable, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses, plus additional measures.

5. Your responsibilities

If you submit personal data about third parties (e.g., prospect contacts) you are responsible for having a lawful basis to do so and for meeting your own transparency obligations. For business customers, we can provide a data processing addendum on request.

6. Retention

We keep account and billing records while you have an account and for up to six (6) years afterwards for tax/accounting and legal purposes. Content and logs are retained for shorter operational periods unless you request deletion sooner (subject to backups and legal obligations).

7. Security

We use reasonable technical and organisational measures, including access controls, encryption in transit, and least-privilege practices. No method of transmission is 100% secure.

8. Cookies

We use essential cookies for authentication and performance. A fuller cookie policy (and consent banner where required) is available on our cookies page.

9. Your rights (UK/EU)

Subject to conditions, you may have the rights to access, rectify, erase, restrict, object to processing, and data portability. Where processing relies on consent, you can withdraw it at any time. To exercise rights, contact privacy@vndie.com. You can also lodge a complaint with the UK ICO (ico.org.uk).

10. Children

The Service is for business users aged 18+.

11. Changes

We may update this Notice. Material changes will be communicated via the Service or email.

12. Contact

Email: privacy@vndie.com
Address: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP, United Kingdom