1. Controller
The data controller is Francisco Luis Martínez Miralles, NIF 74235561W, Calle Velarde 55, 03203 Elche, Alicante, Spain.
Contact: privacy@vonuai.com.
2. Data we may process
- Content submitted for a check: text, messages, screenshots, images, URLs, PDF documents, extracted document text and data contained in them.
- Technical analysis data: check type, detected signals, risk score or band, timing, status and public technical data about a domain.
- A random pseudonymous device identifier used to apply the free-use limit and purchased credits.
- Contact or newsletter data when you voluntarily send a form or request updates.
- Payment and transaction identifiers supplied by Stripe; Vonü does not need to store full card numbers.
- Aggregated analytics data such as pages, referrers, country or approximate region, browser/device type and privacy-safe product events.
3. Purposes and legal bases
We process data to provide the requested check, maintain device credits, process purchases, answer support requests, prevent abuse, secure and diagnose the service, measure product performance and comply with legal, accounting or tax duties.
Depending on the context, the legal basis may be performance of the service or contract, pre-contractual measures, consent, compliance with a legal obligation or legitimate interests in security and product improvement after considering user rights.
4. Artificial intelligence
Text, image or PDF-document checks may be processed by AI providers such as OpenAI and Google, depending on the active function and configuration. Vonü may ask these systems for structured risk or document-review analysis and applies its own calibration rules.
The result is preventive guidance. It is not an automated decision producing legal or similarly significant effects on the user.
5. Links and external technical checks
When you submit a URL, Vonü may fetch the page and query external services such as URLhaus or public RDAP services. Do not submit URLs containing passwords, private tokens or secret parameters unless strictly necessary.
6. Device access without an account
Vonü Check can be used without an account. A first-party technical cookie named vonu_device_id stores a random identifier. It does not contain your name, email or submitted content.
Deleting browser data, using private browsing or changing browser/device may prevent Vonü from recognising previous credits.
7. Payments
Payments are processed by Stripe. Vonü sends only the minimum operational metadata needed to associate the purchase with the device and grant credits. Stripe may process contact, billing, anti-fraud and payment information under its own legal responsibilities and terms.
8. Providers
- Vercel: hosting, execution, Web Analytics and performance measurement.
- Supabase: database and backend functions.
- OpenAI and Google: AI processing where enabled.
- Stripe: payment processing, receipts and payment-fraud prevention.
- Resend: delivery of contact-related email.
- abuse.ch/URLhaus and public RDAP services: technical threat intelligence and domain data for relevant URL checks.
9. International transfers
Some technology providers may process data outside the European Economic Area. Where applicable, transfers must rely on a recognised adequacy decision or appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with any additional measures required by law.
10. Retention
We keep data only for as long as needed for its purpose and applicable legal duties. The device cookie is designed for a maximum technical lifetime of around one year unless deleted earlier. Transaction and invoicing records are retained for legally required periods.
Submitted content, including PDF documents and extracted document text, is processed to generate the requested result. It is not sent to product analytics as raw content. Where an operational security or quality function stores a masked or derived report, it is limited to the purpose for which that function is enabled and should not contain unnecessary secrets.
11. Analytics and product events
Vercel Web Analytics is used for aggregated traffic and product measurement without third-party analytics cookies. Vonü may measure page, referrer, country/region, device/browser and events such as analysis mode, language, risk band, category, duration, success or error.
Vonü does not intentionally include the submitted message, screenshot, PDF content or extracted document text, email address or full analysed URL as an analytics property.
12. Sensitive data, third-party data and minors
Do not submit passwords, OTP codes, PINs, full card details, full identity documents, unnecessary medical data or other secrets. Mask or remove unrelated third-party data in screenshots and PDF documents.
If a minor uses Vonü, a parent or legal guardian should supervise where required by applicable law. Vonü is not intended to knowingly collect unnecessary personal data from children, and minors should not make purchases without the legally required authorisation.
13. Your rights
Where applicable you may request access, rectification, erasure, portability, restriction or objection, and withdraw consent without affecting prior lawful processing. Write to privacy@vonuai.com with enough information to locate the relevant data.
You may also complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority.
14. Security and changes
We apply reasonable technical and organisational security measures. No internet-connected system can guarantee absolute security. This policy will be updated when the product, providers or processing materially changes.