Privacy Policy

Last updated: 15 May 2026

1. Introduction

VestVale values the protection of personal data and the privacy of its users. In this privacy policy, we explain which personal data we collect, why we process this data and what rights users have.

VestVale is a SaaS platform that enables businesses to monitor their visibility on AI platforms such as ChatGPT, Google Gemini, Claude and Google AI Overviews.

By using VestVale, the user agrees to this privacy policy.

2. Data controller

VestVale
Keizersgracht 520
1017 EK Amsterdam
The Netherlands

Chamber of Commerce: 56759398
E-mail: hello@vestvale.com

Websites: vestvale.nl, vestvale.com, vestvale.de, vestvale.fr

VestVale is the data controller for the processing of personal data as described in this privacy policy.

3. Personal data we process

VestVale only processes personal data that is necessary for providing and improving its services.

Account data

  • Name
  • Business email address
  • Encrypted password
  • Account settings

Business data

  • Business name
  • Website URL
  • Business location
  • Search queries and prompts
  • Competitor information

AI analysis results

  • Search queries
  • AI responses
  • Mentions and citations
  • Visibility scores
  • Sentiment analyses
  • Competitor comparisons

Technical data

  • IP address
  • Browser information
  • Session data
  • Login credentials
  • Cookies for functional purposes

Payment data

Payments are processed via Stripe. VestVale does not process credit card data itself. We only receive limited payment information such as payment status, invoice information and transaction IDs.

4. Purposes of processing

  • Creating and managing accounts
  • Providing AI visibility analyses
  • Executing prompts on supported AI platforms
  • Generating dashboards and reports
  • Invoicing and subscription management
  • Customer service and support
  • Platform security
  • Preventing misuse and fraud
  • Improving services
  • Legal obligations

5. Legal bases

Performance of the agreement

For delivering the SaaS services.

Legitimate interest

For security, fraud prevention, platform improvement and statistical analyses.

Legal obligation

For fiscal and administrative obligations.

6. Cookies

VestVale only uses functional and technically necessary cookies for login status, security, session management and basic platform functionality.

VestVale does not use tracking cookies or advertising cookies.

7. Retention periods

Accounts

Account data is retained as long as the account is active. After deletion, data will be permanently deleted within 30 days, unless legal retention obligations require otherwise.

Invoice and payment data

Invoice data is retained for as long as legally required.

Log data

Technical logs may be temporarily stored for security and error analysis.

8. Sharing personal data

VestVale does not sell personal data to third parties. VestVale only shares data with processors necessary for service delivery.

Possible processors

  • Stripe (payments)
  • Hetzner (hosting)
  • SMTP2GO (email delivery)
  • OpenRouter and connected AI providers
  • Supported AI platforms

Data processing agreements are concluded with processors where necessary.

9. International transfers

Some processors or AI platforms may be located outside the European Economic Area. If personal data is processed outside the EEA, VestVale takes appropriate measures to comply with the GDPR.

10. Security

VestVale takes appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, access restrictions, secured hosting and monitoring of misuse.

Although VestVale takes appropriate security measures, absolute security can never be guaranteed.

11. Rights of data subjects

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object

Requests can be submitted via hello@vestvale.com.

12. Account deletion

Users can delete their account via their profile or by contacting VestVale. After deletion, data will be permanently deleted within 30 days, subject to legal retention obligations.

13. Minors

VestVale is exclusively aimed at business users. The platform is not intended for persons under the age of 18.

14. Changes

VestVale may modify this privacy policy. The most current version is always published on the website. In case of important changes, VestVale may inform users.

15. Complaints

Users have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent privacy supervisory authority.

16. Contact

VestVale
Keizersgracht 520
1017 EK Amsterdam
The Netherlands

E-mail: hello@vestvale.com