Legal

Privacy Policy

Last updated August 9, 2026

1. Information we collect

We collect account and contact details, workspace and company information, content you enter or upload, support communications, and technical data such as device, browser, IP address, and service activity.

If your organization uses v-ledge, the service may process customer, supplier, employee, financial, and document data on your organization's behalf.

2. How we use information

We use information to provide and secure the service, authenticate users, operate workspaces, process support requests, communicate service updates, prevent abuse, comply with law, and understand and improve product performance.

Where required, we rely on contractual necessity, legitimate interests, legal obligations, or consent as the legal basis for processing.

3. Your organization as controller

For personal data entered into a business workspace, the subscribing organization generally determines why and how that data is processed. Vestryx processes it as a service provider on the organization's instructions.

Requests concerning data held in a workspace should first be directed to that workspace's administrator.

4. Service providers and disclosure

We may share data with vetted providers that support hosting, storage, authentication, email delivery, monitoring, and customer support. They may process data only for the services they provide to us and under appropriate safeguards.

We may also disclose information when required by law, to protect rights and security, or as part of a corporate transaction. We do not sell personal data.

5. International transfers

Our providers may process data in countries other than your own. Where required, we use recognized transfer mechanisms and contractual safeguards to protect personal data.

6. Retention and security

We retain information for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and workspace settings.

We use technical and organizational safeguards designed to protect data, but no method of transmission or storage is completely secure.

7. Cookies

We use cookies and similar storage that are necessary for authentication, security, language preferences, and core service operation. We may use limited analytics to understand service performance where permitted.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, object to certain processing, or withdraw consent. You may also lodge a complaint with your data protection authority.

9. Contact

For privacy questions or requests, contact hello@vestryx.com. We may need to verify your identity before completing a request.