Privacy Policy

1. Who we are

VectraWatch sp. z o.o., with its registered office in Warsaw, Poland, is the controller of the personal data described in this policy. You can reach us at contact@vectrawatch.com for any question concerning this document or the processing it describes.

Where you use our services to process data of your own — for example when you collect publicly available pages through our infrastructure — you act as the controller of that data and we act as your processor. In that case, the data processing agreement concluded with you, not this policy, governs the processing.

2. Data we collect

We collect only what is needed to provide, bill and secure the service. We do not sell personal data and we do not use it for advertising profiling.

2.1 Account data

When you create an account we process your name, business email address, company name and the credentials needed to authenticate you. If you contact support, we keep the correspondence and any information you choose to include in it.

• identification and contact details of the account owner and invited users;
• authentication data, including API keys and session records;
• billing details, including company data, tax identifiers and payment history.

2.2 Usage data

Using the service generates technical records: requests made, tokens or transfer consumed, jobs scheduled, targets configured, IP address, browser and device information, and timestamps. These records let us bill accurately, investigate incidents and detect abuse.

2.3 Website data

Our website uses cookies and similar technologies that are strictly necessary for it to work, and — only with your consent — analytics cookies that help us understand which pages are useful. You can withdraw consent at any time in the cookie settings.

3. How we use it

We process the data described above in order to:

• provide the service, including authenticating users and running the jobs you configure;
• bill for purchased packs and subscriptions, and keep the accounting records required by law;
• maintain security — detecting abuse, unauthorised access and use that breaches our Acceptable Use Policy;
• provide support and communicate about incidents, changes and service updates;
• improve the service, using aggregated usage statistics rather than individual behaviour;
• send commercial information about our services, where you have agreed to receive it.

4. Legal bases

Where the GDPR applies, we rely on: performance of a contract (Art. 6(1)(b)) for providing the service and billing; our legitimate interest (Art. 6(1)(f)) for security, abuse prevention and product improvement; a legal obligation (Art. 6(1)(c)) for accounting and tax records; and your consent (Art. 6(1)(a)) for analytics cookies and marketing communication.

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing and subprocessors

We share personal data only with providers that help us run the service, and only to the extent they need it: cloud infrastructure and hosting, payment processing, email delivery, error monitoring and customer support tooling. Each of them acts under a written agreement and processes data on our instructions.

A current list of subprocessors is available on request at contact@vectrawatch.com. Where a provider is located outside the European Economic Area, transfers are covered by the European Commission’s standard contractual clauses or another mechanism permitted by law.

We may also disclose data where required by law, or to establish, exercise or defend legal claims.

6. Retention

Account data is kept for as long as the account exists and for up to 12 months after its closure, so that a returning customer can be served and any dispute resolved. Billing records are kept for the period required by tax law, currently five years from the end of the accounting year. Technical and security logs are kept for up to 12 months. Support correspondence is kept for up to 24 months.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on it. You may also lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office.

To exercise any of these rights, write to contact@vectrawatch.com. We respond within one month; where a request is complex, we may extend that period and will tell you if we do.

8. Changes to this policy

We may update this policy as the service or the law changes. Material changes are announced by email to account owners and on this page at least 14 days before they take effect. The date at the top of the page always reflects the current version.

9. Contact

Questions about this policy, about how your data is processed, or about a data processing agreement: contact@vectrawatch.com.