Privacy Policy

1. Information We Collect

We collect information you provide directly to us:

• Account Information: Email address, name, and authentication data when you create an account via Google or email sign-up.
• Payment Information: Billing details processed securely through Stripe. We do not store your full credit card numbers.
• Project Data: Website URLs you provide for content extraction and any uploaded documents or requirements.
• Usage Data: Information about how you use our Service, including pages visited and features used.

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our Service
• Process transactions and send related information
• Send technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Detect, prevent, and address technical issues and fraud

3. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who perform services on our behalf (e.g., Stripe for payments, Supabase for data storage, OpenAI/Anthropic for AI processing).
• Legal Requirements: When required by law or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell your personal information to third parties.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Secure authentication via Supabase Auth
• Regular security assessments and updates
• PCI-compliant payment processing through Stripe

5. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy. Generated website code and project data are retained for 90 days after generation, after which they may be automatically deleted.

You can request deletion of your account and associated data at any time by contacting us.

6. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Access: Request copies of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request restriction of processing
• Portability: Request transfer of your data
• Objection: Object to our processing of your data

To exercise these rights, please contact us at contact@vinkweb.lu.

7. Cookies and Tracking

We use essential cookies to maintain your session and remember your preferences. We do not use third-party advertising cookies or tracking pixels.

You can control cookies through your browser settings, but disabling essential cookies may affect the functionality of our Service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission.

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

VinkWeb S.à r.l.
Email: contact@vinkweb.lu
Location: Luxembourg