Vuneli

Legal

Privacy Policy

This Privacy Policy explains what personal data Vuneli collects, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and the Cyprus Data Protection Law (Law 125(I)/2018).

Last updated
8 July 2026
Jurisdiction
Cyprus · EU (GDPR)
Sections
8

Data controller

Verde IQ, operating from Strovolos, Cyprus, is the data controller for personal data processed through the Vuneli platform. For any privacy question, request, or complaint, contact hello@vuneli.com.

What we collect

We collect only the data needed to operate the service:

  • Account data: name, email, hashed password or OAuth identifier, preferred language and currency.
  • Billing data: subscription plan, payment status and invoice metadata (card details are handled by Stripe — Vuneli never sees full card numbers).
  • Sustainability data you enter: emissions inputs, uploaded documents, energy usage, benchmarks, and generated reports.
  • Product telemetry: pages viewed, errors, feature usage — used to improve reliability. No advertising trackers.

Legal bases (GDPR Art. 6)

We rely on: (a) contract performance to deliver the service you sign up for; (b) legitimate interest to keep the service secure and prevent abuse; (c) legal obligation for tax and accounting records; and (d) consent for optional cookies and email marketing, which you can withdraw at any time.

Your rights

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection. To exercise these rights, email hello@vuneli.com — we respond within 30 days.

You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy).

International transfers

Personal data is processed in the EU / EEA where possible. When a sub-processor operates outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses (SCCs).

Retention

Account data is kept while your account is active and for 12 months after deletion in encrypted backups. Invoices are retained for 7 years to meet Cyprus tax law. You may request earlier erasure of non-mandatory data.

Cookies

Vuneli uses strictly-necessary cookies for authentication and language preference (no consent required under ePrivacy) and optional analytics cookies only after you accept the cookie banner. You can change your choice at any time from the footer.

Contact

Questions or requests: hello@vuneli.com. Security disclosures may be sent to the same address.

A question this page does not answer?

Write to the team in Strovolos. We answer security, privacy and procurement questions within two working days.

hello@vuneli.com