Vesori Privacy Notice
Version 7.0 | 29 October 2026
1. Who is responsible?
Vesori is a trading name of the Dutch sole proprietorship operated by Jorn Sebastiaan van Rijnsoever, registered with the Dutch Chamber of Commerce under number 42183655, VAT identification number NL005563443B98. Business address: Poldermeesterhof 15, 2922 CV Krimpen aan den IJssel, the Netherlands. Contact: info@vesori.app. Vesori is the controller for its own processing activities. Website: https://vesori.app.
2. Personal data we process
Depending on your use, we process email address, account ID, authentication and security data, selected role, language and display preferences, subscription and Founding entitlements, payment status and necessary financial records, search and interaction data, feedback, support communications and privacy requests. Stripe processes payments; Vesori does not store complete payment card details.
3. Purposes and legal bases
Account management, access and subscriptions: performance of a contract (GDPR Art. 6(1)(b)). Mandatory financial records and handling privacy rights: legal obligation (Art. 6(1)(c)). Security, necessary technical operation and targeted product improvement: legitimate interests (Art. 6(1)(f)), subject to a balancing assessment. Consent is sought for separate marketing where required; applicable statutory exceptions may apply.
4. Search, feedback and Founding Analytics
Vesori records certain searches, zero-result searches, search clicks, helpful votes, feedback and knowledge interactions. Depending on the event, search text, feedback text, timestamps and account IDs may be processed; not all events are anonymous. Account-linked Founding Analytics records events including knowledge-object views, relation following and locked-content views to understand product use and return visits. This targeted product improvement relies on legitimate interests, without external advertising profiling or analytics cookies. Authorised staff see limited reports. Do not enter identifiable patient information or other sensitive personal information in free-text fields.
5. Objection to account-linked analytics
You may object to account-linked usage-event processing based on legitimate interests by contacting info@vesori.app. Vesori assesses objections under the GDPR. If an objection is upheld, previously linked events are genuinely de-identified under the established procedure and future events attributable to you are suppressed; your account remains active. Remaining data is treated as anonymous only where re-identification is not reasonably possible.
6. Retention
Search-related free text: up to 90 days. Free-text feedback: up to 12 months. Structured usage events: up to 13 months. Closed privacy and withdrawal request files: generally 24 months for a minimal audit record. Contract evidence: generally up to five years after termination where needed for legal claims. Fiscal records: generally seven years, with longer statutory periods where applicable. Account data is retained while needed to provide the service, then deleted or lawfully retained on a limited basis. Technical provider logs are subject to applicable provider retention periods or criteria; Vesori does not state unverified exact durations.
7. Account deletion and requests
You may exercise access, correction, erasure and other privacy rights by emailing info@vesori.app without signing in. We may request proportionate identity verification. Erasure is assessed by data category, subject to statutory retention obligations. An account deletion request does not automatically cancel a subscription or withdraw from a purchase; implications for ongoing agreements and financial records are handled separately. We generally respond within one month, subject to a legally permitted extension of up to two months with timely notice.
8. Service providers
Vesori uses Lovable Cloud for hosting and platform services, with relevant underlying services such as Supabase and Cloudflare; Lovable Emails/Mailgun for authentication messages; Stripe for payments and subscriptions; and Google Workspace for business correspondence. Providers may act as processors or independent controllers depending on the activity. Vesori does not sell personal data to advertisers. Internal AI assistance for content authoring is not used to process the verified end-user accounts, searches or feedback.
9. International transfers
Some providers or subprocessors may process or access personal data outside the European Economic Area. Where required, applicable transfer mechanisms such as adequacy decisions or Standard Contractual Clauses are used, with supplementary safeguards where necessary. Further information about relevant recipients and safeguards may be requested at info@vesori.app.
10. Cookies and browser storage
The Cloudflare __cf_bm cookie supports bot and security protection; the Lovable hosting __dpl cookie supports consistent routing to a deployment and lasts approximately 24 hours. Both have been assessed as technically necessary and are not used for advertising or marketing tracking. Necessary authentication storage may be created after login and is removed on logout. Language and appearance preferences may be stored locally in your browser. Vesori does not use tracking cookies for the described Founding Analytics. Payments use the secure Stripe Checkout payment environment. During Checkout, Stripe and relevant payment and security service providers may use cookies and similar browser technologies for payment processing, fraud prevention, security, and bot or abuse detection. Depending on the particular processing activity, Stripe may act as a processor on behalf of Vesori and/or as an independent controller. For processing for which Stripe is independently responsible, please see Stripe’s privacy and cookie information: https://stripe.com/privacy and https://stripe.com/cookie-settings. The exact purpose of every individual cookie used by external security services has not been independently confirmed; Vesori therefore does not claim that all Checkout cookies are strictly necessary or exempt from consent requirements.
11. Your rights and complaints
Depending on the circumstances you may have rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) and seek a judicial remedy. Contact: info@vesori.app.
12. Security and changes
Vesori applies appropriate technical and organisational security measures. This notice may change as services, processing or law change. The current version is made available on the website.