Who we are
VAESIR LABS is operated by [Company Name], registered in the Netherlands. We are the data controller for personal data collected through vaesir.com and app.vaesir.com.
Contact: privacy@vaesir.com
What data we collect
We collect the following categories of personal data:
- Account data: name, email address, password (hashed)
- Usage data: features used, session duration, error logs
- Project data: function trees, FHA tables, architecture models, and other safety engineering content you create
- Communication data: messages sent via our contact form
- Payment data: handled by our payment processor — we do not store card details
Legal basis for processing
We process your personal data on the following legal bases under GDPR:
- Contract: to provide the VAESIR LABS service you have signed up for
- Legitimate interest: to improve the product, prevent abuse, and ensure security
- Consent: for optional analytics cookies (you can withdraw at any time)
- Legal obligation: where required by applicable law
How we use your data
- To provide, maintain and improve the VAESIR LABS platform
- To authenticate your account and manage your subscription
- To send transactional emails (account confirmation, password reset)
- To respond to support and sales enquiries
- To detect and prevent fraud and abuse
- To comply with legal obligations
We do not sell your personal data to third parties.
Data storage and security
Your data is stored securely using Supabase (hosted on AWS in the EU). We apply row-level security to ensure users can only access their own data. Data is encrypted at rest and in transit.
Project data — function trees, FHA tables, architecture models, and related safety engineering content — is stored in your account and is never shared with other users or organisations without your explicit consent.
Data retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, unless we are required to retain it for legal reasons.
Your rights
Under GDPR, you have the following rights:
- Access: request a copy of the data we hold about you
- Rectification: correct inaccurate personal data
- Erasure: request deletion of your personal data
- Portability: receive your data in a machine-readable format
- Objection: object to processing based on legitimate interest
- Restriction: request we limit processing of your data
To exercise any of these rights, contact us at privacy@vaesir.com. We will respond within 30 days.
Cookies
We use essential cookies required for the service to function, and optional analytics cookies. See our Cookie Policy for full details.
Third-party services
We use the following third-party processors:
- Supabase — database and authentication (EU hosting)
- Vercel — hosting and edge network
- Resend — transactional email delivery
- Stripe — payment processing (planned)
Each processor is bound by a Data Processing Agreement.
Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on our website.
Contact & complaints
For privacy-related questions: privacy@vaesir.com
You also have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).