We collect information that you provide when you create and use a VEXOA account, together with limited technical information needed to operate, secure and improve the service.

We use information to provide and administer VEXOA, authenticate users, maintain company workspaces, store and display content, process support requests, protect accounts, prevent misuse, diagnose faults, improve reliability and communicate important service information.

We only use personal data where there is an appropriate legal basis, including performing our contract with you, complying with legal obligations and pursuing legitimate interests such as keeping VEXOA secure and improving the service.

VEXOA uses trusted service providers to operate the platform. Firebase Authentication supports account sign-in; Cloud Firestore stores structured application data; Firebase Storage stores uploaded files such as photos, receipts and job evidence; and Firebase Crashlytics receives crash and diagnostic information.

Stripe processes subscription payments and related billing information. Payment card details are submitted to and processed by Stripe; VEXOA does not directly store full card details.

We may share information with service providers that process it on our behalf, with authorised users in your company workspace according to their access, where required by law, or when necessary to protect the rights, safety and security of VEXOA and its users.

VEXOA does not sell personal data.

We retain information for as long as needed to provide VEXOA, maintain your account, meet contractual and legal obligations, resolve disputes and enforce agreements. Retention periods depend on the type of information and why it is held.

When information is no longer required, it is deleted or anonymised. Some financial, transaction or legal records may be retained where the law requires it.

You can request permanent deletion of your VEXOA account and associated company data. Personal data will be removed unless retention is required by law. Visit the Delete Account page for the request steps and expected processing time.

Depending on where you live, you may have rights to access, correct, erase or restrict the use of your personal data, object to certain processing, request a portable copy, withdraw consent where processing relies on consent, and complain to your local data protection authority.

To exercise a privacy right, contact us using the email below. We may need to verify your identity before completing a request.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse or alteration. No internet service or storage system can be guaranteed to be completely secure, so users should also protect their sign-in credentials and devices.

VEXOA is a business service and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to VEXOA, please contact us so that we can investigate and take appropriate action.

For questions about this Privacy Policy, our use of personal data or a privacy rights request, email vexoaapp@protonmail.com.