Legal

Privacy Policy

Last updated: July 20, 2026

1. Introduction

This Privacy Notice is issued by Vettify ("Vettify", "we", "us", "our"), the seller and operator of the Vettify business trust evaluation platform available at vettify.lovable.app. Vettify acts as the data controller for the personal data described in this notice. This notice explains what information we collect, how and why we use it, who we share it with, and the rights you have.

2. Information we collect

  • Account data: name, business name, email, phone, login credentials.
  • Business evaluation data: website, industry, public profile URLs and any information you submit for a Trust evaluation.
  • Support data: messages you send us and correspondence records.
  • Usage & device data: log data, device identifiers, IP address, telemetry.
  • Payment data: handled by Paddle (see Section 4). We do not store card numbers.

3. Purposes and legal bases

  • Provide the service (account creation, running evaluations, delivering reports) — performance of contract.
  • Security, fraud prevention and service integrity — legitimate interests.
  • Product improvement and analytics — legitimate interests.
  • Customer support — performance of contract / legitimate interests.
  • Marketing communications (e.g. Trust Updates newsletter) — consent, which you may withdraw at any time.
  • Legal compliance (tax, accounting, responding to lawful requests) — legal obligation.

4. Sharing and recipients

We do not sell your personal information. We share limited data with the following categories of recipients:
  • Merchant of Record — Paddle.com Market Limited ("Paddle"): Paddle is our authorised reseller and Merchant of Record. Paddle processes all payments, subscription management, invoicing, sales tax, and payment-related customer service on our behalf. Paddle acts as an independent controller for payment data it collects. See Paddle's Privacy Notice.
  • Service providers / subprocessors: hosting, database, email delivery, analytics and support tooling providers who process data on our instructions.
  • Professional advisers: legal, accounting, and compliance advisers where necessary.
  • Authorities: where required by law, court order, or to protect rights and safety.

5. Data retention

We retain personal data for as long as your account is active and thereafter only as long as needed to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Data no longer required is deleted or anonymised.

6. International transfers

Where personal data is transferred outside your country of residence (including outside the UK/EEA), we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

7. Your rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict processing of, port, or object to processing of your personal data, and to withdraw consent at any time. UK/EEA users also have the right to lodge a complaint with a supervisory authority. We aim to respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit and at rest, role-based access controls, and audit logging.

9. Cookies

See our Cookie Policy for details on essential, preference, and analytics cookies and how to manage them.

10. Contact