Privacy Policy

Verde IQ, operating from Strovolos, Cyprus, is the data controller for personal data processed through the Vuneli platform. For any privacy question, request, or complaint, contact samuel@stauniverse.tech.

We collect only the data needed to operate the service:

• Account data: name, email, hashed password or OAuth identifier, preferred language and currency.
• Billing data: subscription plan, payment status and invoice metadata (card details are handled by Stripe — Vuneli never sees full card numbers).
• Sustainability data you enter: emissions inputs, uploaded documents, energy usage, benchmarks, and generated reports.
• Product telemetry: pages viewed, errors, feature usage — used to improve reliability. No advertising trackers.

We rely on: (a) contract performance to deliver the service you sign up for; (b) legitimate interest to keep the service secure and prevent abuse; (c) legal obligation for tax and accounting records; and (d) consent for optional cookies and email marketing, which you can withdraw at any time.

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection. To exercise these rights, email samuel@stauniverse.tech — we respond within 30 days.

You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).

Personal data is processed in the EU / EEA where possible. When a sub-processor operates outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses (SCCs).

Account data is kept while your account is active and for 12 months after deletion in encrypted backups. Invoices are retained for 7 years to meet Cyprus tax law. You may request earlier erasure of non-mandatory data.

Vuneli uses strictly-necessary cookies for authentication and language preference (no consent required under ePrivacy) and optional analytics cookies only after you accept the cookie banner. You can change your choice at any time from the footer.

Questions or requests: samuel@stauniverse.tech. Security disclosures may be sent to the same address.