Privacy policy: Vecta

Vecta is made by MARKETIVE HUB SRL ("Marketive Hub", "we"), Drum Ghindari nr. 73A, Bl. Jovial 3, Et. P, Ap. SC4, Sector 5, București 052837, Romania. For anything about your data, write to mark@marketivehub.com.

• About you: your name and email address, which Marketive sign-in gives us when you sign in with Google or an emailed code. We never see or store a password for Vecta. Optionally a phone number, work details, country, time zone, short bio and photo.
• About your workspace: its name, logo and settings, your mailbox details (the mailbox password is stored encrypted), your templates, and the lists and contacts you upload (email addresses and whatever other columns you add).
• What happened to your emails: which email went to whom and when, whether it was delivered, bounced or unsubscribed, and, only if you turn tracking on for a campaign, opens, clicks and replies.
• Your reports to support (the text you write, your email, your company and the part of Vecta you were in), and counts of how many emails your workspace sent each month.
• When you report a problem, the text you write, your email, your company code, an id for your Vecta account, the part of Vecta you were in and the Vecta version are sent to our own licence and support system (Marketive Control). Vecta has no way to attach screenshots, files or logs to a report. When you press Yes or No under a help article, that vote is sent there too. It also tells Vecta what your company's licence allows (its status, end date and number of seats).

We don't collect anything else, we don't sell data, and we don't use it for advertising.

• To run the app for you: this is needed to give you the service you asked for (contract).
• To keep it safe and working, for example sign-in records and error reports: our legitimate interest in a secure, working app.
• Anything optional, such as product emails: only with your consent, which you can withdraw at any time.

We use a few trusted providers to run Vecta. Each one handles data only to do its job for us:

• Supabase keeps the database, sign-in and uploaded files, in Frankfurt, Germany (European Union).
• Vercel runs the app. The servers that handle your requests for this app are in the United States (US East), so your data passes through them when you use the app. It is not stored there.
• Your own mail provider (for example Gmail or Hostinger) sends your campaigns, through the mailbox you connect. Your emails and your contacts' addresses go to them, as you chose.
• Kinde, our sign-in provider, in Dublin, Ireland (European Union). It checks who you are when you sign in with your Marketive account, using Google or an emailed code, and tells Vecta your name and email address.
• Google, only if you choose to sign in to your Marketive account with Google.
• An email service sends the app's own messages to you (invites, notices).
• Atlas, our CRM, only if the workspace owner connects it: then the email events Vecta records (sent, opened, clicked, replied, bounced, unsubscribed), the reply text, the email addresses and the names of the people you email go from Vecta (Frankfurt, EU) to Atlas (Helsinki, EU), and Atlas's list of people marked Do not email comes back to Vecta. Disconnecting stops it.
• Marketive Control, our own licence and support system, run by Marketive Hub on its own server in Helsinki, Finland (European Union). It receives your reports and help votes and tells Vecta what your licence allows.

Your database and files are in Frankfurt, Germany, in the European Union. The app itself runs on servers in the United States that pass the data on without keeping it.

We keep data while your account is active. After you delete your account (or 30 days after it closes), we delete it, except what the law makes us keep (for example invoices). Items you delete inside the app wait in Trash until you restore them.

You can ask to see, correct, export or delete your data, to limit how we use it, or to object. For this, write to mark@marketivehub.com; we answer within 30 days. You can also complain to the data protection authority (in Romania, ANSPDCP at dataprotection.ro).

When Vecta holds data about other people for you (your contacts and the people you email), you decide what goes in and why: you are the controller and we process it on your behalf, only to run the app. We keep it confidential, protect it, use only the providers listed above, and help you answer requests from those people. Anyone you email can unsubscribe with one click, and that is respected across every list in your workspace.

Only the cookies that keep you signed in. No tracking or advertising cookies, so there is no cookie banner.

When something important changes, we tell you in the app or by email. The date at the top shows the latest version.