Privacy Policy
Introduction
Vonzie Studio ("we", "us", or "our") operates the Vonzie Nexus privacy compliance platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.
We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of our Service, including website visitors, registered users, and customers.
By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
Data Controller
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:
Vonzie Studio
Stationsstraat 5
Axel, Zeeland
Netherlands
Contact Email: nexus@vonzie.app
If you have any questions about this Privacy Policy or our data practices, please contact us at the address above.
Data We Collect
We collect several types of information from and about users of our Service:
Information You Provide Directly
- Account Information: When you register for an account, we collect your name, email address, and password.
- Payment Information: If you subscribe to a paid plan, we collect payment details through our payment processor. We do not store complete credit card numbers on our servers.
- Project Data: Information about the websites you add to our platform, including domain names, cookie configurations, and widget settings.
- Support Communications: When you contact us for support, we collect the information you provide in your communications.
Information Collected Automatically
- Usage Data: We collect information about how you interact with our Service, including pages visited, features used, and time spent on the platform.
- Device Information: We collect information about the device you use to access our Service, including device type, operating system, browser type, and IP address.
- Log Data: Our servers automatically record certain information when you access our Service, including your IP address, access times, and referring website addresses.
Information from Third Parties
- Analytics Providers: We may receive aggregated analytics data from third-party analytics services.
- Payment Processors: Our payment processor may provide us with limited information about your transactions.
How We Use Your Data
We use the information we collect for the following purposes:
- Provide and Maintain the Service: To deliver the features and functionality of our platform, including cookie scanning, widget generation, and policy creation.
- Account Management: To create and manage your account, process transactions, and communicate with you about your account.
- Improve Our Service: To analyze usage patterns, identify bugs, and develop new features and improvements.
- Customer Support: To respond to your inquiries, provide technical assistance, and resolve issues.
- Communications: To send you important updates about the Service, including security alerts, policy changes, and feature announcements.
- Marketing: With your consent, to send you promotional communications about our products and services. You can opt out at any time.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
- Security: To protect against fraud, unauthorized access, and other security threats.
Legal Basis for Processing
Under the GDPR, we rely on the following legal bases for processing your personal data:
| Purpose | Legal Basis |
|---|---|
| Providing our Service | Performance of contract (Article 6(1)(b)) |
| Account management and billing | Performance of contract (Article 6(1)(b)) |
| Customer support | Performance of contract (Article 6(1)(b)) |
| Service improvements and analytics | Legitimate interests (Article 6(1)(f)) |
| Marketing communications | Consent (Article 6(1)(a)) |
| Security and fraud prevention | Legitimate interests (Article 6(1)(f)) |
| Legal compliance | Legal obligation (Article 6(1)(c)) |
Data Sharing and Third Parties
We may share your personal information in the following circumstances:
Service Providers
We work with third-party service providers who perform services on our behalf:
- Hosting Provider: Our infrastructure is hosted on secure cloud platforms that comply with industry security standards.
- Payment Processor: We use Stripe to process payments. Stripe's privacy policy can be found at stripe.com/privacy.
- Email Service: We use email service providers to send transactional and marketing communications.
- Analytics: We use analytics services to understand how users interact with our Service.
Legal Requirements
We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to:
- Comply with legal obligations
- Protect our rights, privacy, safety, or property
- Protect the safety of our users or the public
- Prevent or investigate possible wrongdoing
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have.
International Data Transfers
We are based in the Netherlands, and our primary data processing occurs within the European Economic Area (EEA). However, some of our service providers may be located outside the EEA.
When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place:
- Transfers to countries with an adequacy decision from the European Commission
- Standard Contractual Clauses approved by the European Commission
- Binding Corporate Rules where applicable
- Other valid transfer mechanisms under GDPR
You may request information about the safeguards we use by contacting us at nexus@vonzie.app.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 30 days after deletion |
| Consent records | 5 years (regulatory requirement) |
| Payment records | 7 years (tax/legal requirements) |
| Usage analytics | 26 months |
| Support communications | 3 years |
| Server logs | 90 days |
After the retention period expires, we securely delete or anonymize your data.
Your Rights
Under GDPR and other applicable privacy laws, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct inaccurate or incomplete personal data.
- Right to Erasure: You can request that we delete your personal data in certain circumstances.
- Right to Restriction: You can request that we restrict the processing of your personal data in certain circumstances.
- Right to Data Portability: You can request to receive your personal data in a structured, commonly used format.
- Right to Object: You can object to the processing of your personal data based on legitimate interests.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw it at any time.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, please contact us at nexus@vonzie.app. We will respond to your request within 30 days.
Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection and security
- Incident response procedures
- Regular backups with secure storage
While we strive to protect your personal data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Children's Privacy
Our Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at nexus@vonzie.app.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this policy
- Notify you via email (for registered users)
- Display a prominent notice on our Service
We encourage you to review this Privacy Policy periodically to stay informed about our data practices.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Vonzie Studio
Stationsstraat 5
Axel, Zeeland
Netherlands
Email: nexus@vonzie.app
For data protection inquiries, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.