Privacy policy

1. Data we collect

• Account data: name, email address, hashed password, account settings.
• Billing data: billing name, country and VAT ID (if provided). Card details are entered directly with our PCI-DSS-compliant payment processor (Stripe) and are not stored by us; we retain only the card type and last four digits.
• Content: images you upload and the analysis outputs generated from them.
• Usage & technical data: log data, device/browser information and, only with your consent, anonymous analytics. Only essential cookies run by default.

2. Why we process it and our legal bases (GDPR Art. 6)

3. Processors we use

We share data only with processors acting on our instructions under a data-processing agreement: Stripe (payment processing), our cloud hosting provider, a transactional email provider (service notifications) and AI-inference providers used to generate image-analysis outputs. We do not sell your personal data.

4. Retention

Account data is kept for the life of your account. Uploaded images and their outputs are retained only as long as needed to deliver the service and are deleted when you close your account, except where we must keep billing/tax records for the period required by law. You can delete uploaded content at any time from your account.

5. International transfers

Where a processor is located outside the EEA, any transfer relies on an adequacy decision or the EU Standard Contractual Clauses together with appropriate safeguards.

6. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. You may withdraw consent at any time. To exercise any right, contact hello@vireolens.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

7. Cookies

Only cookies needed to run the site load by default; optional analytics cookies wait for your consent. See our cookie policy for details and how to change your choice.