Privacy Policy
Lees deze pagina in het Nederlands
This policy covers every online service of Virtunet B.V. Data classes and retention periods specific to a service are on that service's own privacy policy, linked from its footer.
Last updated: 2026-09-30
Virtunet B.V. (Dullofsakker 44, 5688VD Oirschot, the Netherlands, KvK 95773444) is the controller for the personal data described in sections 1 to 4 and the processor for the data described in section 5. Contact: info@virtunet.io.
1. What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Your email address | sign-in links, service emails, invoices | contract | until account deletion |
| Plan, payment status, Stripe customer and invoice ids | billing | contract, legal obligation (tax records) | account life; invoices 7 years (Dutch tax law) |
| VAT id and billing address you enter at checkout | invoicing | legal obligation | 7 years |
| Terms acceptance (timestamp, terms version) | proof of contract | contract, legal obligation | until account deletion plus 7 years |
| Support emails you send us | answering you | legitimate interest | 12 months, then deleted from the support mailbox |
| Rate-limit counters (salted hash of the IP address, the email address or the project id) | abuse prevention | legitimate interest | 24 hours |
| Server request logs (IP address, user agent, URL, timestamp) at our hosting provider | security, abuse prevention | legitimate interest | Cloudflare's short standard retention |
| Free tools on this site (no account): the input you give the tool and the result | providing the tool | legitimate interest | as stated on the privacy policy of the service concerned |
We do not use analytics or advertising trackers. The only cookie is the session cookie that keeps you signed in. Preferences for visitors without an account stay in your browser's local storage. Section 1 also applies to visitors who use the free tools without an account; Virtunet B.V. is the controller for that data.
2. Where data is stored and processed
Account data and everything you submit to the Service are stored in the European Union (Cloudflare Durable Objects with the EU jurisdiction setting). Requests are processed at the Cloudflare data centre nearest to you, which may be outside the EU while you are outside the EU; data is not stored there. Transactional email is sent through Resend from its EU region (AWS eu-west-1, Ireland), which keeps message logs for 30 days. Payments are processed by Stripe. Support email is handled in a Fastmail mailbox hosted in the United States; only support conversations go there, never product data. Transfers outside the EU rely on the EU standard contractual clauses of the sub-processor concerned. The full list is at https://virtunet.io/subprocessors.
3. Who we share data with
Only the sub-processors listed above, to provide the Service. We do not sell data and we do not share it for advertising. We disclose data if the law requires it.
4. Your rights
You can access, correct, export, restrict and delete your data, and object to processing based on legitimate interest. The account page (or the project page for products without accounts) offers export and deletion; deletion removes all your data from the Service within 24 hours, except invoice records we must keep for tax law. We make no decisions about you by automated means that have legal or similarly significant effects. Write to info@virtunet.io for anything you cannot do from the page; we answer within one month. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). If your request concerns data that one of our customers put into the Service about you, we forward it to that customer, who is the controller, and tell you we did so.
5. Data you submit to the Service
The content you give the Service (for example HTML, URL lists, contract rows, domain names, client names, recipient addresses) may contain personal data of your customers, contacts or staff. For that data you are the controller and we are your processor under the Data Processing Agreement at https://virtunet.io/dpa. Retention for each data class:
The retention period for each data class is stated on the privacy policy of the service concerned, linked from that service's footer.
6. Security
Data in transit is encrypted (TLS). Stored data is encrypted at rest by our hosting provider. Access is limited to the operator of the Service. Sign-in uses single-use, time-limited email links; we store no passwords.
7. Business transfers
If the Service or Virtunet B.V. is sold or transferred, your data may be transferred to the buyer under the same terms; we will email account holders at least 14 days before, with the option to delete the account.
8. Changes
We will update the date above when this policy changes and email account holders about material changes.
This website: contact form and chat
The following applies to virtunet.io itself. Virtunet B.V. is the controller for it.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Contact form: your name, email address and message | answering your question | legitimate interest | 12 months in the info@virtunet.io mailbox, then deleted |
| Chat: your messages, the assistant's answers, the page you started on and your rating (useful or not) | answering your question; improving the information the assistant uses | legitimate interest | 30 days after the last message, stored in the EU (Cloudflare D1 with the EU jurisdiction setting), then deleted automatically |
| Forwarded chat: the conversation and the email address you give | answering your question | legitimate interest | 12 months in the info@virtunet.io mailbox, then deleted |
The chat is a language model that answers from the information on this website; it can make mistakes. Your messages go through OpenRouter (United States) to the model, which runs in the European Union; neither stores the content. Once a week Virtunet has the language model summarise that week's conversations: which questions recur and which the assistant could not answer. The summary holds no names, email addresses or quotes. We do not use the conversations to train a model or to build profiles. Please do not put sensitive personal data in the chat. The form and the chat use Cloudflare Turnstile against spam. Contact form messages and forwarded chats end up in the info@virtunet.io mailbox at Google Workspace; the sub-processors are listed at https://virtunet.io/subprocessors.