Privacy notice

Effective date: 2026-05-05

What we collect

• Account data: email, name, hashed password, organization name, role.
• Usage data: what you uploaded, what played when, what each screen reported as online or offline.
• Technical data: IP address (for rate-limiting and abuse detection), user-agent, last-login timestamp.
• We do NOT collect: tracking pixels on the marketing site, third-party advertising cookies, or behavioral profiles for ad targeting.

Where it’s stored

Vewport hosts production data in the EU/EEA region of our cloud provider. Self-hosted customers store all of the above on their own infrastructure — we have no visibility into a self-host deployment.

How long we keep it

We retain account data for as long as your subscription is active, plus 30 days after cancellation so you can reactivate without losing your library. After 30 days the account and all org-scoped data are permanently deleted from primary storage; encrypted backups roll off within 90 days of cancellation.

What we share — processors

Vewport uses the following processors to operate the service. Each processes only the data needed for its function:

• Stripe — billing and payment processing (billing email, card token, invoice metadata).
• AWS — application hosting, database, object storage in the EU/EEA region.
• Sentry — error monitoring (stack traces and request context, scrubbed of personal identifiers).
• Cloudflare — CDN and DNS at the edge (IP address, request metadata, no payload inspection).

We notify account owners by email at least 30 days before adding or replacing a subprocessor, so you can object before the change takes effect. No data is sold, ever.

Your rights

Access, export, correction, and deletion — email [email protected]. We respond within 30 days as required by GDPR. You can also delete your organization yourself from Settings; that purges all org-scoped data.

Cookies

Essential session cookies only on the dashboard (https://app.vewport.com). The marketing site uses a single locale-preference cookie (NEXT_LOCALE). No third-party trackers.

Changes

Material changes to this notice are emailed to all account owners 30 days before they take effect.