Loading...
Loading...
This Privacy Policy explains how The Nexus Collective GmbH ("we", "us", "our") collects, uses, and protects your personal data when you use vp.marketing at https://vp.marketing.
The Nexus Collective GmbH is the data controller responsible for your personal data.
The Nexus Collective GmbHWhen you create an account, we collect:
Data you create while using the service:
Where you publish a website, the details you chose to put in its legal notice and on its contact page become public. That is what publishing means, and it is the only way § 5 DDG can be satisfied — but it is worth stating plainly, because it is the one place where data you gave us stops being private by your own decision.
When you publish a website with us, we measure its traffic on your behalf: which pages were read, roughly where from, and whether anybody pressed the phone number, the e-mail address, a form or an outbound link. We do not record what a visitor typed into a form.
No cookie is set and nothing is stored on a visitor's device. A visitor is identified by a value derived from their IP address and browser, combined with a random secret that changes daily and is destroyed two days later — after which the value cannot be traced back by anyone, ourselves included. The IP address itself is never stored. The identifier is different for every site, so a visitor cannot be followed from one customer's website to another's.
For this data you are the controller and we act on your instructions. It is deleted after 24 months. The privacy notice we generate for your site states all of this to your visitors, in German, and is published with the site.
You can build a complete website without registering. Everything you tell us during that process — what your business does, where it is, how to reach it — is stored against an anonymous session so the site can be built and so you can come back to it.
If you never claim that site, it is deleted after seven days, together with everything you entered. No account is created, and we send you nothing: we have no address to send it to unless you give us one.
The legal basis is Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract. If you do create an account, the data moves into it and this section stops applying to it.
We collect anonymized usage data including:
This data is collected anonymously and cannot be used to identify you personally.
Payment information is collected and processed directly by Stripe. We do not store your credit card details on our servers. We receive only transaction confirmations and billing history.
We use your data to:
We process your data based on:
We use the following third-party services to process your data. All processors are GDPR-compliant and data is primarily - where possible - processed within the European Union:
| Service | Purpose | Data Processed |
|---|---|---|
| Supabase | Database & Authentication | Account data, content, auth tokens |
| Stripe | Payment Processing | Payment details, billing info |
| PostHog | Analytics | Anonymized usage data |
| Resend | Email Communications | Email address, name |
| Zoho | Support Communications | Support ticket content |
| OpenAI, Anthropic, Google, Vercel (Gateway) | AI Features | Content you submit to AI features |
| Vercel | Hosting | Hosting your data |
When you use AI-powered features, relevant content is sent to our AI providers (currently OpenAI, Anthropic, Google, Vercel (Gateway)) to generate responses.
Important: We do not use your content to train AI models. Your data is processed only to provide the specific AI features you request.
This includes building a website before you have an account: the answers you give are sent to a model in order to write the pages. If you would rather not have that happen, do not use the guided setup — there is no way to generate the copy without it.
Your legal pages are not written by a model. The imprint and privacy notice on a site we build are assembled from the details you entered, word for word. A model is never asked to write, summarise or reword them, and the same applies to any quotation you supply as a customer testimonial.
You have the right to:
You can export your data at any time through your account settings, where export features are available.
You can delete your account at any time from your account settings. Upon deletion:
We recommend exporting your data before deletion.
We implement appropriate technical and organizational measures to protect your data, including:
Your data is primarily stored and processed in the European Union (Supabase EU region). When data is transferred outside the EU (e.g., to AI providers), we ensure appropriate safeguards are in place.
We use cookies for authentication, preferences, and anonymized analytics. For details, see our Cookie Policy.
vp.marketing is not intended for children under 16 (EU) or 13 (elsewhere). We do not knowingly collect data from children below these ages.
We may update this Privacy Policy periodically. For material changes, we will notify you via email or through the service at least 30 days before the changes take effect.
If you have concerns about our data practices, please contact us at support@vp.marketing.
You also have the right to lodge a complaint with a supervisory authority. In Germany, this is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).
For privacy-related inquiries:
The Nexus Collective GmbH