Privacy Policy

How we collect, use, and protect your data

Last updated: July 13, 2026

1. Who We Are

This website is operated by CREAITOR LABS EOOD, registered in Bulgaria with UIC/VAT number BG208832093.

Address: 79 Knyaz Al. Dondukov Blvd., Floor 7, Apt. 7, Sofia 1504, Bulgaria

Contact email: support@veasybility.io

2. What Data We Collect

2.1 Account Data

On registration we collect: email address and password (hashed). Optionally you may add your name, domain, and business information.

2.2 Payment Data

Payments are processed exclusively by Stripe Inc. We do not store credit card data. We only receive a subscription token and payment status.

2.3 Technical Data

We automatically collect: IP address, browser type, operating system, pages visited, access times — for security and analytics purposes.

2.4 Domain Scan Data

When we scan your domain, we temporarily access publicly available content from your site. We do not store full copies of content — only metadata and analysis results.

3. How We Use Your Data

• To provide the service (AI visibility analysis, report generation)
• To process payments and manage subscriptions
• To send important account notifications (invoices, confirmations)
• To improve the service and provide technical support
• To comply with legal obligations

Legal basis (GDPR Art. 6): we process your data to perform our contract with you (providing the service and billing), to comply with legal obligations (accounting and tax), for our legitimate interests (security, service improvement, fraud prevention), and — where applicable — with your consent (e.g. connecting social accounts), which you can withdraw at any time.

4. Who We Share Data With

We do not sell your data. We share only with the following trusted partners:

• Stripe — payment processing (USA, EU)
• Supabase — database hosting (EU servers)
• Vercel — website hosting
• Anthropic / OpenAI — AI content analysis
• Resend — email delivery (EU servers)
• Zoho Mail — email communication (EU servers)

International transfers: some partners (e.g. Stripe, Anthropic, OpenAI) may process data in the USA. Such transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) and appropriate safeguards.

Data we process on your behalf: the visitor analytics collected by our website plugin are processed by us as a processor acting on your behalf — you remain the controller. This is governed by our Data Processing Agreement (DPA), which forms part of the Terms you accept when creating an account.

5. Your Rights (GDPR)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP)

To exercise rights: support@veasybility.io

6. Cookies

We use only technically necessary cookies for service functionality (login session, language preferences). We do not use advertising or third-party tracking cookies. A cookie banner is not required for essential cookies, but we display one for transparency.

7. Data Retention

• Account data: while you have an active subscription + 12 months after termination
• Invoices and accounting documentation: 10 years (legal requirement)
• Log files: 90 days
• Scan results: while you have an active subscription

8. Security

All data is transmitted encrypted (TLS/SSL). Passwords are hashed with bcrypt. Data is stored in EU data centers. We have procedures in place for data breach response.

9. Changes to This Policy

We may update this policy. We will notify you of significant changes by email. Continued use after changes means acceptance.

10. Contact

For privacy-related questions:

CREAITOR LABS EOOD 79 Knyaz Al. Dondukov Blvd., Floor 7, Apt. 7 Sofia 1504, Bulgaria Email: support@veasybility.io