How Vánsöll Projects intends to handle account information, project documents and platform data.
Effective date: 21 September 2026. This policy should be read together with the Terms of Use and applies to the Vánsöll AI website and service operated by Vánsöll Projects.
Depending on how you use the service, we may process account information, business contact details, subscription information, usage and audit data, uploaded project documents, extracted document content, generated findings, user feedback, support enquiries and security logs.
We process information to provide and secure the service, operate accounts and subscriptions, ingest and analyse project evidence, generate user-requested outputs, maintain auditability, prevent abuse, provide support, improve product quality and meet legal obligations.
Project content remains owned by the customer or applicable rights holder. Vánsöll Projects processes that content to provide the service and does not claim ownership merely because it is uploaded. Customers are responsible for ensuring they have authority to upload the material.
Where an external AI provider is used, only the information necessary for the requested processing should be sent. Vánsöll’s intended production configuration uses business/API data controls and will not deliberately opt customer project data into shared model training without explicit authorised consent. Provider retention settings and subprocessors will be documented as the production architecture is finalised.
The service is designed around user, company and project boundaries. Access should be limited according to authenticated roles and project permissions. Vánsöll personnel or service providers may access information only where reasonably necessary for support, security, legal compliance or operation of the service and subject to appropriate confidentiality obligations.
Production project files are intended to be stored in controlled cloud object storage while structured metadata, permissions and evidence references are held in the application data layer. Retention periods may vary by plan, contract, legal obligation and customer instruction. Deleted information may remain temporarily in backups or security logs where reasonably necessary.
Vánsöll Projects intends to handle personal information in accordance with applicable South African data-protection requirements, including POPIA, and to support additional obligations such as GDPR where they lawfully apply to a customer or processing activity.
Subject to applicable law, individuals may request access, correction or deletion of personal information and may object to or restrict certain processing. Organisational project data may also be subject to contractual and record-retention requirements.
The website may use essential cookies for authentication, preferences and security. Analytics or optional tracking should be configured so that appropriate notice or consent is provided where required.
Production controls are intended to include encrypted transport, controlled storage, access restrictions, audit logging, backups, secure secret management, upload validation and abuse protection. No internet-connected service can promise absolute security.
Cloud and AI providers may process information in jurisdictions outside the customer’s country. Where required, Vánsöll Projects will use appropriate contractual or technical safeguards for cross-border processing.
Privacy requests may currently be sent to admin@vansollprojects.com. A dedicated privacy alias is recommended before public launch.