Privacy policy

This policy explains how Vuely, Inc. (Vuely or we) collects, uses, and shares personal information when you visit vuely.co, use the Vuely app at vuely.app, open a link someone sent you through Vuely, or talk with us.

Two roles

For our own customers, visitors, and prospects, Vuely decides how personal information is used, and this policy applies.

For our customers' clients, Vuely works on our customer's behalf. A sign company that uses Vuely may store its clients' names, contact details, site addresses, and building photos in Vuely. That sign company controls this information, and our Data Processing Addendum governs how we handle it. If you are a client of a sign company that uses Vuely, please send requests about your information to that company. We will help them respond.

What we collect

• Account details. Your name, email address, company name and logo, role, and the teammates you invite. Clerk handles sign-in for us, so we never see your password. If you sign in with Google, Google shares your name, email address, and profile picture.
• Billing details. Your plan, billing contact and address, payment history, and your card's brand and last four digits. Stripe handles full card numbers. We never see them.
• What you put into Vuely. Site photos, measurements, artwork and logos, client and project details, prices, proposals, feedback with screenshots and attachments, and questions you ask the in-app help assistant. Photos can include embedded data such as when and where they were taken. If you allow it, the app can use your device's location to place a project on the map.
• Usage and device data. Pages you view, features you use, clicks, your IP address, browser and device type, approximate location based on your IP address, the site that referred you, and error and console logs.
• Session recordings. In the Vuely app, including site-survey pages, and on vuely.co, PostHog records sessions so we can find bugs and improve the product. A recording rebuilds what was on screen, with mouse movements, clicks, scrolling, and console logs. Form fields are hidden, but other text and images on screen, including project and client details, can appear in a recording. We keep recordings for 30 days.
• Conversations with us. Emails, support requests, contact form submissions (name, company, email address, phone number, and message), and demo bookings made through Calendly. We record and transcribe some sales and onboarding calls, and we tell you at the start of the call when we do.
• From other sources. Our CRM provider can add publicly available business information about your company, such as its website and size.
• People who open a site-survey link. When you open a site-survey link someone sent you through Vuely, we receive what the sender entered about you, anything you submit (for example, site-survey photos and measurements), and usage data such as page views, session recordings, your IP address, and device type.

How we use it

If you are in the European Economic Area, the UK, or Switzerland, the legal basis for each use is in brackets.

• To provide Vuely: running your account, storing your work, and sending emails and links you ask us to send (performing our contract).
• To run AI features: we send the photos, artwork, text, and addresses a feature needs to our AI providers so they can return a result (performing our contract).
• To bill you and process payments (performing our contract).
• To give support and answer questions (performing our contract; our legitimate interest in helping you).
• To keep Vuely secure and prevent fraud and abuse (legitimate interests; legal obligations).
• To improve Vuely through analytics, session recordings, and staff review of mockups and the inputs that produced them. We keep the exact images sent to mockup generation for 90 days for this purpose (legitimate interests; consent for analytics cookies where the law requires it).
• To send service messages, product updates, and newsletters. You can unsubscribe from updates and newsletters at any time (performing our contract for service messages; legitimate interests or consent for updates).
• To manage sales and customer relationships, including recorded calls (legitimate interests; consent where the law requires it).
• To comply with the law and enforce our terms (legal obligations; legitimate interests).

AI and your content

The AI providers listed on our subprocessors page process content only to return results to Vuely, and they do not use it to train their models. We do not use your content in marketing without your written permission. Ask Vuely, the in-app help assistant, is an AI system. Its answers come from an AI model, not a person.

Cookies and similar technology

• Essential. Sign-in sessions, security, and saved preferences. These are always on.
• Analytics. PostHog stores cookies and local storage for product analytics and session recordings. Vercel Web Analytics counts page views without cookies.
• Embedded content. Calendly on our demo booking page, and YouTube and Loom videos, may set their own cookies when they load.

If you are in the European Economic Area, the UK, or Switzerland, we ask for your consent before using analytics cookies or recording your session. Everyone can change their choice at any time: on vuely.co with the Cookie settings link at the bottom of the page, and in the Vuely app under Settings, Preferences, Usage analytics, or with the Cookie settings link on the sign-in and site-survey pages. You can also block cookies in your browser.

Who we share it with

• Service providers that host, store, and process data for us, such as hosting, database, sign-in, payments, email, analytics, AI, maps, and CRM providers. They are listed on our subprocessors page and may use the data only to provide their services to us.
• Your organization. Administrators and teammates in your Vuely organization can see the work stored there.
• People you send links to. Anyone with a site-survey link you send can see what it shows.
• A buyer or successor, if Vuely is involved in a merger, acquisition, or sale of assets.
• Authorities and others when the law requires it, or to protect the rights, property, or safety of Vuely, our customers, or others.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

How long we keep it

• Account data and work stored in Vuely: while your subscription is active, and for 12 months after it ends so it is there if you come back. Then we delete it. Ask us and we will export it or delete it sooner, within 30 days. Backup copies are deleted as the backups expire.
• Images sent to mockup generation: 90 days.
• Screenshots and attachments sent with feedback: 365 days. We keep a short record that the feedback existed.
• Session recordings: 30 days.
• Sales contacts, call recordings, and call notes: while we have, or are discussing, a business relationship with you, or until you ask us to delete them.
• Invoices and payment records: as long as tax and accounting laws require.

Security

We encrypt data in transit, use hosting and database providers that encrypt data at rest, keep each customer's data separate by organization, and limit staff access to people who need it to support and improve Vuely. The Data Processing Addendum lists our safeguards. No system is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

International transfers

Vuely is based in the United States, and we store the data in Vuely accounts in the United States. Some of our service providers process data in other countries, as shown on our subprocessors page. When we transfer personal information from the European Economic Area, the UK, or Switzerland, we use the European Commission's Standard Contractual Clauses and the UK Addendum, or rely on our providers' certification under the Data Privacy Framework.

Your rights and choices

You can ask us to give you a copy of your personal information, correct it, delete it, or send it to you in a portable format. You can unsubscribe from marketing emails using the link in any of them. Email support@vuely.co to make a request. We will confirm your identity and reply within 30 days. We will not treat you differently for using these rights.

If you are in the European Economic Area, the UK, or Switzerland, you can also object to or restrict our use of your information, withdraw consent at any time, and complain to your local data protection authority.

If you live in a U.S. state with a consumer privacy law, such as California, Colorado, Connecticut, Virginia, or Utah, you have the rights that law gives you, which can include the right to know, delete, correct, and opt out. You may use an authorized agent. If we deny your request, you can appeal by replying to our decision.

Children

Vuely is for businesses and is not meant for anyone under 18. We do not knowingly collect personal information from children.

Changes to this policy

We will post any change on this page and update the date at the top. For a material change, we will email account administrators at least 30 days before it takes effect.

Contact

Vuely, Inc. Email support@vuely.co with questions or requests about your privacy.