Privacy Policy

Last updated: 22 April 2026

1. Introduction

Vynce B.V. ("Vynce", "we", "us", or "our") operates an AI-powered document intelligence platform (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website or use the Service. We comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and — for Turkish residents — the Turkish Personal Data Protection Law (KVKK, Law No. 6698).

2. Data Controller

Vynce B.V.
Vinkenburgstraat 2A, 3512 AB Utrecht, The Netherlands
Email: privacy@vynce.ai

3. Information We Collect

  • Account information — name, work email, company, phone, role.
  • Document content — files you upload for processing and any extracted structured data.
  • Usage data — log data, device information, IP address, browser type, pages viewed, timestamps.
  • Communications — messages you send through contact or demo forms, support tickets.
  • Billing data — processed by our payment provider; we store only invoicing metadata.

4. How We Use Your Information

  • Provide, operate, and maintain the Service.
  • Process documents you submit and return structured results.
  • Improve, personalize, and expand our Service, subject to your explicit consent where required.
  • Communicate with you, including for customer support and service updates.
  • Comply with legal obligations and enforce our terms.

We do not train foundation models on your document content unless you have given prior explicit written consent.

5. Legal Bases (GDPR Art. 6)

  • Performance of a contract — to provide the Service you subscribe to.
  • Legitimate interests — product improvement, security, fraud prevention.
  • Consent — marketing communications, optional analytics, model training on customer data.
  • Legal obligation — tax, accounting, law enforcement requests.

6. Sharing and Disclosure

We share personal data only with vetted sub-processors under a Data Processing Agreement (DPA): cloud hosting providers, email delivery services, analytics, customer support tooling, and payment processors. A current sub-processor list is available upon request. We do not sell personal data.

7. International Transfers

Our primary processing takes place in the EU. Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) and additional safeguards as required.

8. Data Retention

We retain personal data for as long as necessary to provide the Service or as required by law. Document content is retained according to the retention period configured in your account (default: 90 days after processing). You may request earlier deletion at any time.

9. Your Rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing, and to data portability. EU/UK residents may lodge a complaint with their supervisory authority. To exercise your rights, contact privacy@vynce.ai.

10. Security

We implement industry-standard technical and organizational measures including encryption in transit (TLS) and at rest, role-based access control, audit logging, and regular security reviews.

11. Children

The Service is not directed to persons under 16. We do not knowingly collect personal data from children.

12. Changes

We may update this Policy from time to time. Material changes will be announced via email or in-product notice at least 30 days before taking effect.

13. Contact

Questions? Contact our Data Protection Officer at privacy@vynce.ai.