Privacy Policy

1. Who we are

Vontade is a B2B software platform designed to help companies model and govern how their operations run.

2. Personal data we collect

We may collect the following categories of personal data:

Account information

• Name
• Email address
• Company name
• Account credentials (stored securely)

Usage and technical data

• Product usage events and interactions
• Log data, timestamps, and system activity
• IP address, browser type, and device information

Content and files

• Structured data entered into the platform
• Documents or files uploaded by users where enabled

Uploaded documents may contain business, operational, or other sensitive company information depending on how users choose to use the service.

We do not knowingly collect personal data about children.

3. How we use personal data

We use personal data to:

• Provide and operate the Vontade platform
• Authenticate users and manage accounts
• Process user inputs and uploaded content
• Improve product functionality and reliability
• Maintain security and prevent misuse
• Communicate with users about the service
• Comply with legal obligations

4. Legal basis for processing

We process personal data based on:

• Contractual necessity — to provide the service requested
• Legitimate interests — to improve, secure, and operate the product
• Legal obligations — where required by law

5. AI processing

Vontade uses third-party AI service providers via infrastructure and gateway services to process user inputs and uploaded content in order to generate outputs requested by users.

AI providers process data only for the purpose of providing the requested functionality and in accordance with applicable data protection safeguards.

6. Data sharing

We may share personal data with trusted service providers who help us operate the platform, including:

• Hosting and infrastructure providers
• Database and authentication providers
• Analytics and monitoring providers
• Payment processors

We do not sell personal data.

7. International data transfers

Some service providers may process data outside the UK or European Economic Area. Where this occurs, appropriate safeguards are applied in accordance with applicable data protection laws.

8. Data retention

We retain personal data only for as long as necessary to provide the service, comply with legal obligations, or resolve disputes.

Users may request deletion of their account and associated personal data, subject to legal retention requirements.

9. Your rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing

Requests can be made by contacting legal@vontade.ai.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the website or product.