Privacy policy

The short version

• No advertising or tracking cookies. We count visits to veturas.com without cookies and without identifying you.
• We collect only what we need to reply to you and to run the service.
• We do not sell data and do not share it with anyone for marketing.
• The data of buyers who contact a dealership belongs to that dealership. We process it only on its behalf.

Who we are

Veturas is a service of Vargu Digital. For the data described in this policy, Vargu Digital is the controller. Because we offer the service to businesses in the European Union too, we also follow the General Data Protection Regulation (GDPR), in line with its Article 3(2).

What we do not do

• We do not build advertising profiles and do not buy contact lists.
• We do not use your data or your buyers' data to train artificial intelligence models.
• We do not look at a dealership's data outside the support access described below.

What we collect and how long we keep it

• Sign-up form: the name, email and phone of the person signing up; the dealership's name, country and city; the chosen plan. Basis: your request to open an account (steps before a contract). If you don't become a customer, we keep it for up to 24 months after the last contact; if you do, the account line below applies.
• Dealership account: name, email, phone and role of the people using the dashboard, plus the business details needed for the contract. Basis: the contract. We keep it for as long as the contract lasts, then up to 90 days for the export and closing.
• Invoices and payment records: kept for 10 years, as accounting law requires.
• Technical logs: IP address, time, page requested and browser, kept by the hosting provider to keep the service running and secure. Basis: legitimate interest. Kept short-term, no more than 30 days.
• Support emails: kept for as long as they are needed to solve the matter, and no more than 24 months.
• Visit statistics on veturas.com (Vercel Web Analytics): the page opened, the page you came from, country, device type and browser. No cookies, no stored IP address and no tracking across other sites; a visitor is recognised only by a marker that changes every day. Only on veturas.com, not in the dashboard and not on dealer websites. Basis: our legitimate interest in understanding how the site is used.

Buyer and customer data of dealerships

When a buyer sends an enquiry through a dealership's website, or when the dealership enters its own customers into the dashboard, the dealership is the controller and we are the processor. We process that data only to provide the service, under the Data Processing Agreement. Questions about that data go first to the dealership; if you write to us, we pass them on.

Who helps us technically

• Vercel: hosting the website and the application.
• Supabase: database, sign-in and file storage.
• Porkbun: domain registration and DNS.
• Groq: the language model behind the Veturas AI features.

These providers process data only on our behalf and according to our instructions. The full list, with purpose and location, is in the Data Processing Agreement.

Transfers outside the European Union

The database and application are stored in the European Union. Where a provider processes data outside the European Economic Area, the transfer is protected by the European Commission's Standard Contractual Clauses or by an adequacy decision.

Cookies

This website does not use cookies for advertising or tracking. In the customer dashboard we use only technical cookies that keep you signed in. These do not need consent.

Your rights

Under GDPR Articles 15 to 21 you have the right to access your data, to correct it, to have it deleted, to restrict its processing, to receive it in a portable format and to object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time (Article 7(3)).

How to use them

Email info@veturas.com. We reply within one month, as Article 12(3) requires. If a request is unusually complex we may extend that by two more months and will tell you why within the first month. We may ask for enough information to confirm who you are, only so that we do not hand your data to someone else.

Complaints

Tell us first if you can, but you never have to. You can complain directly to the data protection supervisory authority in the country where you live, work, or where you believe the problem happened (Article 77).

Our EU representative

Because we are established outside the European Union but offer the service to businesses there, Article 27 may require us to designate a representative in the Union. We are in the process of appointing one and will name them here once that is in place. Until then, write to us directly at info@veturas.com.

How we protect your data

Everything is served over HTTPS, the database separates each dealership's data with row-level security rules, and support access is limited in time, read-only and logged. Details are on the Security page.

If something goes wrong

If a breach is likely to put your rights at risk, we notify the competent supervisory authority within 72 hours of becoming aware of it (Article 33), and where the risk is high we tell the affected people directly and in plain language (Article 34).

Children

Veturas is sold to businesses and is not aimed at children. We do not knowingly collect data from anyone under 16. If you think a child has sent us data, tell us and we will delete it.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects your rights we say so clearly, rather than quietly editing the text. Previous versions are available on request.