Privacy Policy
1. Who we are
VESTELON and VESTELON FLOW are operated by Harbor Equity a.s. (“we”), a company registered in the Czech commercial register under IČO 21989249, with its registered seat at Dlouhá 730/35, 110 00 Prague, Czech Republic. Harbor Equity a.s. is the data controller. For any privacy matter, contact us at hello@vestelon.com (or hello@vestelonflow.com for FLOW).
2. What data we collect
When you submit the contact form we process the data you provide: name, email address, company (optional), the audience category you select and the content of your message. We do not use advertising trackers and we do not resell data.
3. Purpose and legal basis
We process this data solely to respond to your inquiry and to follow up on it. The legal basis is your consent (Art. 6(1)(a) GDPR), given by ticking the consent box before sending the form. You may withdraw consent at any time.
4. Retention
Messages are kept for a maximum of 12 months after the conversation ends, then deleted, unless a longer period is required by law.
5. Recipients and transfers
Form submissions are delivered through our email processor (Resend, acting as a data processor). The AI assistant uses Anthropic as a processor (see section 6). Web fonts are self-hosted from our own servers, so loading them sends no data to Google or any other third party. The only exception is the Chinese and Arabic language pages, whose script-specific fonts are loaded from Google Fonts; on those pages your browser contacts Google servers and your IP address is transmitted to them when those fonts load, and no cookies are set for this. Only if you accept analytics in the cookie banner do we use Google Analytics (Google acting as a processor) to measure aggregate traffic; it sets analytics cookies and we enable IP anonymisation. You can decline, and withdraw consent at any time by clearing this site’s storage in your browser. We use no advertising trackers. Data is stored within the European Union where possible. We never sell or share your data for marketing purposes.
6. AI assistant
The site offers an optional AI chat assistant. To answer your questions, it sends your messages to our model provider (Anthropic, acting as a processor) and may store the questions asked, in an anonymised form, to understand what visitors are interested in and to improve VESTELON. We do not store your IP address with these messages. If you choose to share your email in the chat to request follow-up, we treat that as your consent to contact you and forward it to the founding team. Please do not enter sensitive personal data into the chat. The legal basis is our legitimate interest in improving the service (Art. 6(1)(f) GDPR), and your consent where you provide contact details (Art. 6(1)(a)).
7. FLOW: bank statements and your report
VESTELON FLOW analyses the flow of money in personal finances. To create your report you may upload a bank statement (PDF or CSV). We process the transactions it contains only to generate your money-leak report and the insights you ask for. We do not connect to your bank and never ask for online-banking login details. You may redact (black out) your name, account number or anything personal before uploading; FLOW reads the transaction lines, not your identity. Uploaded files and generated reports are encrypted and stored on our servers inside the European Union. CSV, OFX/QFX, MT940 and CAMT.053 are parsed locally in your browser. For PDF or unrecognized content only, its text (dates, descriptions, amounts) may be processed by our contracted AI processor Anthropic (USA) under a data-processing agreement after you give explicit consent. Your data is not used to train third-party AI models and is never sold or shared for marketing. We keep them only until you delete them, which you can do at any time, including before you pay for anything. If you join the early-access list, we process the name and email you provide to open access and send your first report; the legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. For FLOW privacy matters contact hello@vestelonflow.com.
8. Your rights
Under the GDPR you have the right to access, rectify and erase your data, the right to restrict or object to processing, the right to data portability and the right to lodge a complaint with your supervisory authority (in the Czech Republic: ÚOOÚ, uoou.gov.cz).
9. Contact
To exercise any right, email hello@vestelon.com. We respond within 24 hours on business days.