Privacy policy
www.vectys.ai website and VECTYS application
Courtesy translation. In the event of any discrepancy, the French version of this privacy policy prevails.
1. Data controller
VECTYS, a société par actions simplifiée with share capital of €2,000.00, registered with the Paris Trade and Companies Register under number 108 300 450, whose registered office is at 21 B avenue d’Iéna, 75116 Paris, is the controller of the personal data described in this policy.
Contact: contact@vectys.ai — +33 6 76 39 29 37
2. Data collected and purposes
VECTYS collects and processes personal data in connection with the following activities:
| Purpose | Data concerned | Legal basis | Retention period |
|---|---|---|---|
| Handling enquiries via the contact form (prospecting) | Company name, email address, telephone number, and any information volunteered by email | Legitimate interest (commercial approach initiated by the prospect) | 3 years from the last contact |
| Creation and management of the user account on the VECTYS application | Login credentials, name, email address, data relating to use of the application | Performance of the contract entered into with the client | Duration of the contractual relationship + statutory limitation periods |
| Operation of the application (dashboard, launching and tracking verifications) | Data entered or generated by the user in the course of using the application | Performance of the contract | Duration of the contract, in accordance with the terms agreed with each client |
3. Data recipients
The data collected is intended for the authorised internal teams at VECTYS (sales, technical, support) within the limits of their respective remits. It may also be disclosed to the technical sub-processors of VECTYS strictly necessary for providing the site and the application, in particular:
- Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, United States): hosting of the www.vectys.ai marketing site.
- Google LLC — Google Cloud Platform (1600 Amphitheatre Parkway, Mountain View, CA 94043, United States): hosting of the VECTYS application, on servers located in Europe.
VECTYS does not sell or rent its users’ personal data to third parties for commercial purposes.
4. Data transfers outside the European Union
The host of the marketing site, Vercel Inc., is a company incorporated under United States law. A transfer of personal data to the United States may therefore occur in connection with the technical hosting of the marketing site. That transfer is governed, according to the mechanism in force offered by Vercel, by standard contractual clauses approved by the European Commission or by any other equivalent arrangement guaranteeing an adequate level of data protection.
The VECTYS application, for its part, is hosted on Google Cloud Platform infrastructure operated by Google LLC, a company incorporated under United States law, but on servers located in Europe (European Google Cloud region). Data processed in connection with use of the application (dashboard, verifications) is therefore stored and processed within the European Union. VECTYS nevertheless remains mindful that Google LLC, as a United States company, may remain subject to certain extraterritorial United States legislation (such as the CLOUD Act); where applicable, the contractual safeguards offered by Google Cloud (standard contractual clauses, data localisation and sovereignty commitments) apply.
5. Data security
VECTYS implements reasonable technical and organisational measures to protect personal data against loss, unauthorised access, disclosure or alteration, in particular as regards access control to application accounts and the securing of data exchanges.
6. Rights of data subjects
In accordance with the GDPR and the Loi Informatique et Libertés, every person has the following rights over their personal data:
- Right of access and rectification
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to object, in particular to prospecting
- Right to data portability
- Right to give directions as to the fate of the data after death
These rights may be exercised by writing to contact@vectys.ai, together with proof of identity where necessary. A response will be provided within a maximum of one month.
In the event of difficulty, every data subject also has the right to lodge a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL) — www.cnil.fr.
7. Amendments to the privacy policy
VECTYS reserves the right to amend this privacy policy at any time, in particular to comply with any legal, regulatory or technical development. The version in force is the one published on the www.vectys.ai site.
Last updated: 13 August 2026