Privacy Policy

Effective date: 28th of August 2025

This Privacy Policy explains how Vektiq SAS (“OnSource”, “we”) collects and processes personal data.

1. Data controller

Vektiq SAS – 22 rue chaptal, 75009 Paris, France
Contact: contact@onsource.ai

2. Data collected
‍
• Identification: name, surname, email address
• Usage data: projects, searches, interactions within the platform
• Technical logs: connection, IP address, browser details

3. Purposes and legal basis
‍
• Service delivery (contract performance – GDPR Art. 6.1.b)
• Customer support and communication
• Service improvement (legitimate interest – GDPR Art. 6.1.f)
• Legal obligations (GDPR Art. 6.1.c)

4. Data retention
• Active account: data kept as long as the subscription is active
• Termination: data retained for 60 days to allow export, then permanently deleted

5. Data hosting and subprocessors
‍
• Data is hosted on Amazon Web Services (AWS), Europe region (Ireland/Frankfurt).
• We may use trusted subprocessors (e.g., AWS, email delivery providers, analytics tools). A current list is available upon request.

6. Data transfers

Transfers outside the EU are covered by Standard Contractual Clauses (SCCs).

7. User rights

You have the right to access, rectify, erase, restrict, object to processing, and request data portability. To exercise your rights: contact@onsource.ai.

8. Security

We apply industry-standard security measures, including authentication, access control, encrypted traffic, and backups. MFA (multi-factor authentication) can be enabled at the organization level.