Privacy Policy
Last updated:
This policy explains how Renfluence handles personal data in VerticalHero: what we collect, why, who receives it, how long we keep it and what rights you have. It applies to the website and the application, including voice conversations.
Who we are
VerticalHero is a product of RENFLUENCE ADVERTISING SERVICES P.C. (“Renfluence”, “we”), a Greek private company based at 71 Kifisias Avenue, Athens 115 23, Greece. You can reach us at [email protected] or +30 21 6070 5394.
We handle personal data in two roles:
- Controller. For the accounts of the people who use VerticalHero, for billing, for security and for running the service, we decide how and why personal data is used. This policy covers that.
- Processor. For the content a customer puts into its workspace, such as files and messages, the customer decides and we act on its behalf, under the data protection section of the Terms of Use. If you are a person named in that content, the customer is your first contact.
What we collect
- Account: your name, work email, password (stored only as a hash) or Google sign-in details, profile picture, and your devices and sessions.
- Workspace: your workspace, its members, roles and invitations, and your plan, credits and usage.
- Billing: where a plan is paid, the billing details needed to invoice you. Card details go to our payment provider and do not reach us.
- What you put in: your chats, the files you attach, your projects, lists and notes, what the assistant remembers for you or your team, and reports.
- Voice: if you start a voice conversation, your speech passes through our servers to the model provider. We do not store the audio. We keep the written transcript in the chat.
- Technical: your IP address, browser and device details, and service logs. Logs carry identifiers, codes and timings, and not your messages, emails or what you asked the tools to do.
- Contact: what you send us when you write to us.
If you are a creator
VerticalHero shows information about social media creators, such as handles, profile pictures, audience figures and public posts. It comes from Renfluence’s creator data, which is built from publicly available information and platform sources. Renfluence’s own Privacy Policy explains how that data is collected.
Our customers use it to find creators for campaigns, which is our legitimate interest and theirs. You can object, or ask for access, correction or erasure, at [email protected]. A customer who adds you to a project decides how it uses your details for itself, and you can also ask it directly.
Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Provide your account, workspace and the features you use | Contract |
| Billing, invoices and tax records | Contract and legal obligation |
| Service emails: verification, password reset, invitations | Contract |
| Security, abuse prevention, fixing faults, usage limits | Legitimate interests: keeping the service safe and working |
| Support, including opening an account to investigate a problem | Contract and legitimate interests |
| Showing creator data to customers | Legitimate interests: influencer marketing research |
| Legal claims and requests from authorities | Legal obligation and legitimate interests |
The assistant and AI
VerticalHero’s assistant is an AI system, and voice replies are generated by it. Its answers can be wrong, so check what matters.
To answer you, we send what the assistant needs to an AI model provider: your messages, the text of attached files, relevant project details and notes, and the results of the tools it uses. We use these providers as a business customer and through their programming interfaces. We do not train AI models on your content.
The assistant does not take decisions about you that have legal or similarly significant effects. Spending credits waits for a person’s approval.
Transfers outside Europe
Some of these providers are based in, or reach their systems from, countries outside the European Economic Area, including the United States. Where a country has no European Commission adequacy decision, we rely on appropriate safeguards such as the Standard Contractual Clauses. You can ask us for details at [email protected].
How long we keep it
| Data | Kept for |
|---|---|
| Account, private chats and memory | Until you delete them or your account. A workspace of which you are the only member goes with the account; a shared workspace stays with its members. |
| Workspace content | Until the customer deletes it or the workspace |
| Files attached but never sent | 24 hours |
| Details of how a chat turn ran | 7 days |
| Security audit entries | Kept for accountability; your name and email are removed when your account is deleted |
| Invoices and tax records | Up to 10 years, as Greek tax law requires |
| Messages to us | Until resolved, and at most 1 year |
| Backups | Replaced on a rolling basis, currently after 14 days |
Your rights
Under the GDPR you have the right to:
- know what we hold about you and receive a copy;
- correct what is wrong;
- have your data erased;
- restrict how we use it;
- receive the data you gave us in a portable form;
- object to uses based on legitimate interests;
- withdraw consent, where we rely on it, without affecting what came before.
You can change your profile and delete your account in Settings. For everything else, including a copy of your data, write to [email protected]. We answer within one month and may ask you to confirm who you are. If a customer controls the data, we will pass your request on to it or help it answer.
You can complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority where you live or work.
Security
We use encrypted connections, hash passwords, encrypt stored credentials and check permissions on the server on every request. Access by our staff is limited and recorded. No service is free of risk, so if we learn of a breach that affects you we will tell you and the authorities as the law requires.
Age
VerticalHero is for adults using it for work. It is not meant for anyone under 18, and we do not knowingly collect their data.
Changes to this policy
When this policy changes, we update the date at the top. If a change matters to you, we will tell you by email or in the product before it applies.
Contact
RENFLUENCE ADVERTISING SERVICES P.C., 71 Kifisias Avenue, Athens 115 23, Greece. Email [email protected], telephone +30 21 6070 5394.