Privacy Notice

Who is responsible for your data

Veyntiq is operated by Nareflo (Pty) Ltd ("Nareflo", "we", "us"), trading as Veyntiq. For the personal data described here we act as the controller — we decide what is collected and why. You can contact us about privacy at devan@nareflo.co.za.

What we collect and why

• Account identity — your email address and authentication details (or the identifier from your Google sign-in), and a user record for your account. Used to create your account, sign you in, and secure access.
• Websites you add — the name, URL and monitoring configuration of each website, including its scan schedule and whether email alerts are enabled. Used to provide the monitoring service you asked for.
• Scan results and issue history — the outcome of each check we run against your websites (availability, response status and timing, homepage links, homepage forms, HTTPS and security headers), plus the open/resolved state and history of detected issues. Used to show you results, track changes over time, and decide when to alert you.
• Subscription and billing status — your plan, subscription status, period dates, and the subscription/customer identifiers our payment provider gives us. Used to give you the correct plan entitlement and website allowance. Card and payment details are collected and held by Paddle, not by us; we never see or store them.
• Notification preferences and logs — your per-website alert setting, and a record of alert emails we sent (which website, which issue, when). Used to send transactional alerts and to avoid sending you the same alert repeatedly.
• Operational and security logs — technical records generated when the app and its background jobs run, which can include IP address, request metadata and error details. Used for security, fraud and abuse prevention, troubleshooting and improving the service.

We use this data to provide and operate Veyntiq, authenticate you, apply your plan entitlement, send transactional alerts and service emails, keep the service secure, diagnose problems, and improve how the product works. We do not use it for advertising, we do not sell it, and Veyntiq does not run advertising or marketing trackers.

Legal grounds for processing

Where data protection law requires us to identify a ground, we generally rely on performance of our agreement with you (providing the service you signed up for), our legitimate interests (keeping the service secure, preventing abuse, improving the product), and compliance with legal obligations (for example tax and accounting records held through our Merchant of Record). Where consent is required for something, we will ask for it.

Who we share data with

• Hosting, database and authentication providers — to run the application, store your data, and sign you in.
• Paddle.com, our reseller and Merchant of Record — for checkout, payment processing, subscription management, tax compliance and invoicing. Paddle handles the payment relationship and its own privacy notice applies to what it collects at checkout.
• Email delivery provider — to send transactional alert and account emails to your address.
• Professional advisers and authorities — where we are legally required to share information, or need advice about a legal matter.

Some of these providers operate outside your country, so your data may be processed internationally. Where the law requires safeguards for such transfers, we rely on the mechanisms our providers make available.

How long we keep it

Account, website and scan data is kept while your account is active so your history stays useful to you. If you ask us to delete your account, we delete or anonymise the associated data, except where we must keep records for legal, tax or dispute-handling reasons — for example billing records held through our Merchant of Record. Operational logs are kept only for as long as they are useful for security and troubleshooting.

Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections, authenticated access, and database access rules that restrict each account to its own records. Scans run server-side with protections that prevent them from being pointed at internal or private network addresses. No system is completely secure, so please use a strong, unique password.

Your rights

Depending on where you live, you may have rights over your personal data — for example to access it, correct it, delete it, restrict or object to certain processing, receive a copy of it, or withdraw consent you gave. You may also have the right to complain to your data protection authority. Email devan@nareflo.co.za and we will respond within the time applicable law allows.

Cookies and similar technologies

Veyntiq uses only what it needs to work: a session/authentication token stored in your browser to keep you signed in, and cookies that our payment provider sets during checkout. We do not use advertising or analytics cookies. Clearing this storage will sign you out.

Changes to this notice

If we change how we handle personal data we will update this page and its effective date, and give notice where the change is material.