Privacy Policy
Last updated: 27 July 2026
1. Who we are
Vectis.ai BV, registered in Belgium (Tervuren), is the controller of your personal data. You can reach us at hello@vectis.ai.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address, name, company, use case | Waitlist management and product updates | Consent (Art. 6(1)(a) GDPR) |
| Email address | Magic-link sign-in to the platform | Contract performance (Art. 6(1)(b) GDPR) |
| Usage data, page views, events | Product analytics (PostHog, EU-hosted) | Consent (Art. 6(1)(a) GDPR) |
| Session recordings, heatmaps | UX improvement (PostHog, EU-hosted) | Consent (Art. 6(1)(a) GDPR) |
| Waitlist details, page history | Responding to enquiries (HubSpot) | Consent (Art. 6(1)(a) GDPR) |
| IP address, browser, device | Security and abuse prevention | Legitimate interest (Art. 6(1)(f) GDPR) |
3. Cookies and tracking
We use a consent management tool (Klaro) to obtain your permission before loading analytics and tracking scripts. You can change or withdraw your consent at any time by clicking the cookie settings widget on any page.
Two services can be enabled: PostHog for product analytics, hosted in the EU, and HubSpot for responding to enquiries. Both are off until you turn them on.
HubSpot may set a tracking cookie (hubspotutk) to associate a waitlist submission with the pages you looked at first, so we can reply with context. It is used for attribution only and is not shared with third parties. Declining it does not prevent you joining the waitlist.
4. Who we share data with
We use the following sub-processors:
- HubSpot, Inc.: CRM and email (US; EU–US Data Privacy Framework)
- PostHog, Inc.: Product analytics (EU region hosted)
- Hetzner Online GmbH: Cloud infrastructure (EU)
We do not sell your personal data to third parties.
5. Retention
Waitlist contacts are retained until you unsubscribe or request deletion. Platform accounts are retained for the duration of the service relationship plus 90 days after account deletion. Analytics data is retained for 12 months.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time (without affecting prior processing)
To exercise any of these rights, email hello@vectis.ai. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données, dataprotectionauthority.be).
7. Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email to registered users. The "last updated" date at the top of this page reflects the most recent revision.
8. Contact
Questions about this policy? hello@vectis.ai Vectis.ai BV, Tervuren, Belgium.