Introduction
Vektor (“we”, “us”, or “our”) operates an AI-powered competitive intelligence platform designed for industrial B2B companies. We are committed to protecting your privacy and handling your data with transparency, integrity, and in full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains what personal data we collect, why we collect it, how we process and store it, and what rights you have regarding your information. It applies to all users of our website, platform, and services at vektor.nanocorp.app.
By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our services.
What Data We Collect
Account & Contact Information
- Name, email address, company name, and job title
- Phone number (if provided)
- Billing address and payment-related identifiers
Platform Usage Data
- Log data (IP address, browser type, operating system, referring URLs)
- Feature usage patterns and interaction data within the platform
- Search queries and report configurations you create
- Alert preferences and notification settings
Competitive Intelligence Data
As part of our service, Vektor collects and processes publicly available competitive intelligence data on behalf of our clients. This may include information about companies, markets, regulatory filings, patents, news articles, and other public sources. This data is collected as a data processor acting on your instructions, and is governed by your subscription agreement with us.
Communication Data
- Messages sent through our contact forms or support channels
- Email correspondence related to your account
- Demo request information
Payment Information
Payment processing is handled by our third-party payment processor, Stripe. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Stripe’s handling of your payment information is governed by their Privacy Policy.
How We Use Your Data
We process your personal data for the following purposes:
- Service delivery — To provide, maintain, and improve our competitive intelligence platform, including generating reports, alerts, and market analyses
- Account management — To create and manage your account, process subscriptions, and handle billing
- Communication — To respond to inquiries, send service-related notifications, and provide customer support
- Analytics & improvement — To understand usage patterns, improve our platform, and develop new features
- Security — To detect, prevent, and address fraud, abuse, and technical issues
- Legal compliance — To comply with applicable laws, regulations, and legal processes
Legal Basis for Processing
Under the GDPR, we process your personal data based on the following legal grounds:
Contractual necessity
Processing necessary to perform our contract with you — including providing the platform, managing your account, and delivering competitive intelligence reports.
Legitimate interest
Processing necessary for our legitimate business interests, such as improving our services, ensuring platform security, and conducting analytics — provided these interests are not overridden by your data protection rights.
Consent
Where required, we obtain your explicit consent before processing — for example, for non-essential cookies or marketing communications. You may withdraw consent at any time.
Legal obligation
Processing necessary to comply with legal requirements, such as tax regulations, anti-fraud measures, or responding to lawful requests from public authorities.
Data Sharing & Third Parties
We do not sell your personal data. We share data only in the following limited circumstances:
Service Providers
We work with trusted third-party providers who process data on our behalf:
- Stripe — Payment processing. Stripe acts as an independent data controller for payment data.
- Hosting & infrastructure providers — To host our platform and store data securely
- Analytics providers — To understand how our platform is used and improve the experience
- Email & communication providers — To send transactional and service-related messages
All service providers are contractually bound to process data only on our instructions and in compliance with applicable data protection laws. We conduct due diligence to ensure adequate data protection standards.
Legal Requirements
We may disclose your data if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Vektor, our users, or the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice before your data is transferred and becomes subject to a different privacy policy.
Your Rights
Under the GDPR and applicable data protection laws, you have the following rights regarding your personal data:
Right of access — Request a copy of the personal data we hold about you.
Right to rectification — Request correction of inaccurate or incomplete personal data.
Right to erasure — Request deletion of your personal data, subject to legal retention obligations.
Right to restriction — Request that we limit the processing of your personal data in certain circumstances.
Right to data portability — Receive your personal data in a structured, commonly used, and machine-readable format.
Right to object — Object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — Withdraw consent at any time where processing is based on your consent.
To exercise any of these rights, contact us at vektor@nanocorp.app. We will respond to your request within 30 days, as required by the GDPR. If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Access controls and authentication mechanisms
- Regular security assessments and monitoring
- Employee training on data protection and security practices
- Incident response procedures for data breach notification
While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach in accordance with GDPR requirements.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specific retention periods include:
- Account data — Retained for the duration of your subscription and up to 12 months after account closure, unless you request earlier deletion
- Competitive intelligence data — Retained for the duration of your subscription. Upon termination, client-specific intelligence data is deleted within 90 days
- Billing & transaction records — Retained for up to 7 years to comply with tax and accounting regulations
- Communication records — Retained for up to 24 months after the last interaction
- Analytics data — Aggregated and anonymised data may be retained indefinitely for statistical purposes
When data is no longer needed, it is securely deleted or anonymised so that it can no longer be associated with you.
International Data Transfers
Vektor primarily targets European industrial companies. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Transfers to countries with an adequacy decision from the European Commission
- Other legally recognised transfer mechanisms under the GDPR
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the “Last updated” date at the top of this page
- Notify active users via email for significant changes
- Provide a notice on our platform where appropriate
We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us:
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.