Privacy Policy

Last updated: 24 Aug 2025

This Privacy Policy explains what information we collect on vcal-project.com and related sites (“Website”), how we use it, and the choices you have. VCAL is built to run on-prem; data processed by the VCAL software in your environment remains under your control.

1. Scope & Who we are

This policy covers the Website, waitlist/pilot forms, and our customer support channels. It does not cover data you process with VCAL software that you host yourself (including metrics you export to Prometheus/Grafana in your environment).

2. Information we collect

2.1 Website

Server logs (automatically): IP address, user-agent, referrer, and basic request metadata for security and reliability.
Cookies/Trackers: We do not use marketing or cross-site tracking cookies. Any cookies used are strictly necessary for site functionality.

2.2 Waitlist / Pilot access

Contact details: name, email, company and any message you submit.
We store this to reply, qualify pilot access, and provide updates you opt into.

2.3 Support channels

Emails you send to us, and metadata needed to respond.

3. Product telemetry (self-hosted)

VCAL’s reference deployments can emit local Prometheus metrics (e.g., cache hit rate, latencies). These stay within your infrastructure unless you explicitly expose them. We do not receive this data by default.

4. How we use information

Operate and improve the Website.
Respond to inquiries and manage pilot access.
Send product updates or security notices you opted into (you can unsubscribe at any time).
Prevent abuse, secure our services, and comply with legal obligations.

5. Legal bases (GDPR/EEA/UK)

Contract: to respond to your requests and provide pilot access.
Legitimate interests: to secure, maintain, and improve the Website.
Consent: for optional communications; you may withdraw at any time.
Legal obligation: where required by applicable laws.

We do not sell your personal information. We may share limited data with:

Hosting providers (e.g., Netlify) to serve the Website.
Email provider (Fastmail) to process and store our correspondence.
Service providers who help us operate the Website (under confidentiality and data processing terms).
Legal requests, to comply with laws or protect rights and safety.

7. Data retention

Server logs: typically retained for a short period necessary for security and diagnostics.
Waitlist/pilot info: kept until we process your request or you ask us to delete it.
Support emails: retained as long as needed to manage our relationship and obligations.

8. Security

We apply reasonable technical and organizational measures to protect information. No method of transmission or storage is 100% secure; please contact us if you suspect an issue.

9. International transfers

If we transfer data across borders, we use appropriate safeguards (e.g., standard contractual clauses), where required by law.

10. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or port data. To exercise rights, contact us at privacy@vcal-project.com. You may also have the right to lodge a complaint with your local supervisory authority.

11. Children’s privacy

The Website is not directed to children under 13 (or the age required by your jurisdiction), and we do not knowingly collect their data.

12. Changes to this policy

We may update this policy. We will revise the “Last updated” date and, when appropriate, provide additional notice.

13. Contact

Questions? Email privacy@vcal-pro ject.com.