Privacy Policy

1. Who we are

VCola Limited is the data controller for your personal data.

‍

• ‍Address: 10 Earlsfort Terrace, Dublin 2, D02 T380
• ‍Email: privacy@vcola.ai

2. The personal data we collect

We try to collect only what we need.

‍

• When you visit vcola.ai: basic technical data (IP address, browser type, device info) inour server logs. We don't use analytics, advertising, or tracking cookies.
• When you contact us, request a demo, or sign up for our newsletter: your name, work email, company, role, and anything you put in your message.
• When you use our AI platform as a customer or authorised user: account details (name, email, company), authentication data, and the inputs you submit, including answers to questions about your application domain that the platform uses to generate software for you. When we host customer data in production, we will process the data you choose to upload or connect.
• When you apply for a job: the information in your application - CV, cover letter, contact details, work history and anything else you share. If the process continues, we may also collect interview notes and references.
• When you pay for our service: card details are collected directly by our payment processor. We don't store full card numbers.

3. How we use it

Under GDPR, we need a legal basis for every use of personal data:

‍

• Operating our website and responding to enquiries - our legitimate interest in running our business.
• Delivering and supporting our AI platform - performance of our contract with you.
• Processing payments - performance of the contract.
• Sending service-related messages (security, account, terms updates) - contract / legitimate interest.
• Sending marketing communications - only with your consent or where you're an existing customer receiving information about similar services. You can opt out anytime via the unsubscribe link or by emailing privacy@vcola.ai.
• Assessing job applications - steps before an employment contract / legitimate interest in recruiting.
• Complying with legal obligations - tax, accounting, lawful authority requests.
• Keeping our service secure - legitimate interest in preventing abuse and enforcing our terms.

4. Who we share data with

We share personal data only with trusted parties who help us run our business:

‍

• Stripe - payment processing.
• LLM Providers - to process inputs to our AI platform under no-training enterprise/API terms.‍
• AWS - to host our infrastructure inside the EU.
• GitHub - to host code generated for or by customers.
• Professional advisers (lawyers, accountants, auditors) under confidentiality, where needed.
• Authorities, regulators, or courts where required by law.
• A successor entity in the event of a merger, acquisition, or restructuring

‍

We do not sell or rent personal data.

5. Where your data is stored

Personal data is stored and processed within the European Union. Some sub-processors (such

as LLMs) are based in the United States.

6. How long we keep it

• Customer account and platform data: duration of your contract + up to 6 years
• Marketing leads and prospects: up to 2 years from your last meaningful contact.
• Job applicants: up to 12 months after the process ends; sooner on request.
• Website server logs: 30–90 days.
• Email correspondence: as long as needed to handle the conversation and follow-up

7. Your rights

Under GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict or

object to how we use it, give it to you (or another provider) in a portable format, or withdraw

consent where we rely on it.

‍

Email privacy@vcola.ai to exercise any of these rights — we'll respond within a month.

‍

If you're unhappy with how we've handled your data, you can contact the Irish Data Protection Commission: dataprotection.ie, 21 Fitzwilliam Square South, Dublin 2, D02 RD28.

8. Cookies

We use only strictly necessary cookies - the small files needed to make the site work. No

analytics, advertising, or tracking cookies, so no consent banner is required under EU rules. If

we add non-essential cookies later, we'll update this policy and ask first.

9. Changes

We may update this policy as the service or the law evolves. We'll change the "Last updated"

date above and, for material changes, let you know.