1. Data Controller
- Company: Valiyou Aps
- Address: Sankt Peders Stræde 19A, 1453 København K, Danmark
- VAT: DK 44596180
- Email: trust-center@valiyou.com
- Phone: +45 28 87 22 00
- DPO Phone: +45 31 10 79 13
- Website: https://valiyou.com
- Valiyou App: https://valiyou.io
- Documentation: https://docs.valiyou.com
- Status: https://status.valiyou.com
- Trust Center: https://valiyou.io/trust-center
2. What Data We Collect
We collect the following types of personal data:
- Account data: name, email, password (hashed), organization details
- OAuth data: name, email, profile image (if you choose social login)
- Usage data: page visits, device type, browser information
- Technical data: IP address, session information, security logs
- Business data: valuations, sponsor information, uploaded content
- Billing data: handled securely by Stripe (we do not store card numbers)
3. How We Use Your Data
We use your data to:
- Provide and operate the Valiyou platform
- Authenticate your login and manage accounts
- Process payments via Stripe
- Improve platform performance and user experience
- Protect the service from fraud or abuse
- Send essential service emails (verification, billing, notifications)
We only send marketing emails if you explicitly consent.
4. Legal Basis
We process your data based on:
- Contract (to deliver the service)
- Legitimate interest (security, analytics)
- Consent (cookies, marketing)
- Legal obligation (tax and accounting requirements)
5. Third-Party Services
We share data only with essential service providers:
- Supabase (EU) – database hosting
- Vercel (EU) – platform infrastructure (Paris, Stockholm, Frankfurt)
- Stripe (EU/US) – payment processing
- OAuth providers – if you choose social login
- Email service – for transactional emails
- Anthropic (US) – in-app AI assistant: processes your chat messages, the content of the page you are viewing, and organization data the assistant looks up on your behalf. API data is not used for model training.
All providers use appropriate GDPR safeguards.
6. International Transfers
Some services operate outside the EU. Transfers are protected using:
- EU Standard Contractual Clauses (SCCs)
- DPF-certified providers where applicable
7. Cookies
We use cookies for:
- Essential authentication
- Saving preferences (language, theme)
- Analytics (only with consent)
You can manage cookie preferences in the cookie banner or your browser.
8. Data Retention
- Account & organization data: kept until deleted by the user
- Backups: retained for 30 days
- Payment records: kept for 5 years (legal requirement)
- Logs: kept for security purposes for a limited time
9. Your Rights
You may:
- Access your data
- Correct your data
- Delete your account
- Export your data
- Withdraw consent
- Object to certain types of processing
Contact: trust-center@valiyou.com
10. Security
We use:
- HTTPS/TLS encryption
- Database encryption
- Bcrypt password hashing
- Role-based access control
- Bot protection and rate limiting
11. Data Breaches
We will notify relevant authorities and affected users when required by law.
12. Children
You must be 16+ to use Valiyou. We do not knowingly collect data from minors.
13. Changes to This Policy
Users will be notified 30 days before significant changes take effect.
14. Contact
For privacy questions or requests: trust-center@valiyou.com
This is a simplified overview of our Privacy and Cookies Policy.