Privacy Policy

Privacy Policy · Last updated: 12 March 2026

This Privacy Policy explains clearly and transparently how VaultIntel processes personal data in operating its website, communicating with business contacts, and providing business-to-business (B2B) services, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Greek Law 4624/2019.

Data Controller

The Data Controller is the business trading as VaultIntel, tax identification number (AFM): 803131216, telephone: +30 210 444 5371.

Email for privacy enquiries: hello@vaultintel.co

VaultIntel has not appointed a Data Protection Officer (DPO), unless and to the extent that such an appointment becomes legally mandatory or we announce otherwise.

Who this Policy applies to

This Policy applies to:

• Representatives and executives of business customers.
• Business contacts (B2B leads).
• Visitors to vaultintel.co who act on behalf of a business.

Personal data relating to these individuals may be received directly from them or indirectly from their company or employer, publicly available professional sources (such as company websites, company profiles, and business directories), or professional referrals.

The service is not intended for individual consumers.

What data we collect

We mainly collect data necessary to provide services to businesses, as well as certain technical data needed to operate, secure, and manage our website and systems.

A. Business contact details

• Business email addresses (e.g., info@, sales@, name@company.com)
• Name of the company representative or contact person
• Business telephone number
• Company name

B. Website and product data

• E-commerce store URL
• Publicly accessible product pages
• Product XML feeds
• Product descriptions and technical specifications

C. Website technical and security data (where collected)

• IP address
• Browser/device metadata
• Access logs and timestamps
• Security logs
• Information submitted through a contact form
• Cookie identifiers and related technical identifiers, where applicable

Our processing primarily concerns product data and business contact information. If personal data not necessary for providing the service is inadvertently sent to us, we reserve the right to delete or isolate it, or request that the processing be brought into legal compliance before any further use.

Purposes and legal bases of processing

Processing is carried out under Article 6 of the GDPR.

A. Performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR)

We process data to:

• Assess requests for cooperation or samples
• Fulfil orders and provide agreed services
• Produce product descriptions using automated tools and AI services
• Provide technical, organizational, and commercial support for the business relationship

Where a request is made by a sole trader or an individual acting personally to obtain a quote or service, processing may also rely on pre-contractual steps or performance of a contract. Certain necessary contact details and relevant URLs, XML feeds, or other datasets are required to provide the service.

B. Legitimate interests (Article 6(1)(f) GDPR)

We process personal data concerning business contacts, representatives, and executives to:

• Communicate about our services in a B2B context
• Manage relationships with existing and prospective customers
• Improve service quality, security, and functionality
• Prevent abuse, fraud, and unauthorized use

When we communicate for direct marketing purposes in a professional context, data subjects have the right to object at any time, free of charge.

Our legitimate interest is limited to business communication relevant to the recipient’s professional activities and is exercised with respect for their rights and freedoms.

C. Legal obligation (Article 6(1)(c) GDPR)

We retain data required to:

• Issue and retain tax documents
• Comply with tax, accounting, and corporate obligations
• Comply with other applicable legal obligations

Sharing data with third parties

We do not sell or rent customer data to third parties.

We may share data only where necessary with:

A. Artificial intelligence (AI) and other technology infrastructure providers

To produce product descriptions, we may use APIs or other services from third-party AI providers (e.g., OpenAI), together with other technology infrastructure providers.

• We disclose only the data necessary to perform the specific service.
• Where a third party processes personal data on our behalf, it acts as a Processor under Article 28 of the GDPR and an appropriate agreement.
• Where a third party independently determines the purposes and means of processing, it acts as an independent Controller under its own terms and privacy notices.
• Where we use providers’ business/API services whose contractual terms specify that inputs and outputs are not used for training by default, this applies subject to the relevant provider’s terms in force at the time.
• We take reasonable technical and organizational measures to transmit and process data securely.

B. Other technical or operational service providers

• Hosting and cloud infrastructure providers
• Email and communications providers
• Accounting and tax systems
• Security, backup, or technical support providers, where required

If personal data is transferred outside the European Economic Area (EEA), we apply an appropriate lawful mechanism under Chapter V of the GDPR, such as a European Commission adequacy decision, Standard Contractual Clauses (SCCs), or another appropriate safeguard, as applicable.

To the extent that VaultIntel processes personal data on behalf of a customer as a Processor, that processing is also governed by a separate Data Processing Agreement (DPA), where legally required.

Cookies and similar technologies

Our primary website is vaultintel.co.

The domains vaultintel.ai, getvaultintel.com, vaultintelhq.com, and tryvaultintel.com redirect to the primary domain.

What cookies are

Cookies are small text files stored on your device when you visit a website. Similar technologies, including local storage or other technical identifiers, may be used to retain preferences or, where the required consent has been obtained, for analytics and advertising.

Categories and consent

We use strictly necessary cookies and similar technologies required for the basic operation and security of the website and for storing your cookie preferences. These essential mechanisms cannot be disabled through the preferences tool.

The optional “Analytics” and “Advertising” categories are disabled by default and only activate when the corresponding consent is given. Rejecting optional cookies does not affect the site’s basic operation.

We do not use cookies to sell data or for aggressive commercial targeting. For any non-essential cookie or similar technology, where required by law, we provide information and a consent-management mechanism before activation.

In this version of the website, we use Google Analytics 4 (GA4) only after a visitor consents to the “Analytics” category. Before that consent, GA4 does not load and Analytics cookies are not created. If consent is withdrawn, we disable further data transmission and attempt to delete related accessible first-party cookies. Google Tag Manager and Meta Pixel are not currently active. If advertising technology such as Meta Pixel is enabled in the future, it will only be used after the corresponding consent is given where required.

You may change or withdraw your preferences at any time via the “Cookie Preferences” link in the footer. More information is available in our Cookie Policy.

Browser settings

You can configure your browser to reject or delete cookies. Some website functions may then be unavailable or may not work correctly. If your browser also blocks strictly necessary storage, we may not be able to remember your choice and the consent banner may reappear.

Data retention

We retain data only for as long as necessary for the purposes of processing and in accordance with applicable legal obligations. For example:

• Business contact information and B2B leads: for up to twelve (12) months after the last meaningful communication, unless earlier deletion is requested or another lawful basis for retention applies
• Customer and cooperation records: for the duration of the contractual relationship and for as long as necessary afterward to establish, exercise, or defend legal claims
• Tax and accounting records: for as long as required by tax and accounting law
• Technical logs and security data: for as long as reasonably necessary for security, auditing, and incident response

After the applicable retention period, data is securely deleted or anonymized.

Your rights (GDPR)

As a data subject, you have the following rights:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure — the “right to be forgotten” (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to object (Article 21 GDPR)
• Right to data portability (Article 20 GDPR), where applicable

You can exercise your rights by emailing hello@vaultintel.co.

We will respond within the periods specified by the GDPR. Where processing is for direct marketing, you may object at any time and the relevant processing will cease for that purpose.

VaultIntel does not make decisions producing legal or similarly significant effects for individuals solely through automated processing, within the meaning of Article 22 of the GDPR, in connection with these activities.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Data security

We implement appropriate technical and organizational measures, including:

• Access controls for systems.
• Encryption of data in transit (SSL/TLS).
• Access restricted to authorized personnel.
• Contractual confidentiality obligations.

We take measures appropriate to the nature of the data and the risks of processing to safeguard confidentiality, integrity, and availability.

Changes to this Policy

This Policy may be amended to reflect changes in legislation, our processing practices, or our services. The current version will be published on vaultintel.co with an updated “last revised” date.

For questions or requests concerning personal data processing or the exercise of GDPR rights, contact us at hello@vaultintel.co.