VezaLink

Legal

Privacy Notice

This Privacy Notice explains how Petr Makula, trading as VezaLink, processes personal data when you visit the VezaLink website or use the VezaLink service. Registered/principal address: Bellusova 1870/56. Privacy questions can be sent to support@vezalink.com.

1. Controller and roles

Petr Makula is the controller for personal data collected directly through the VezaLink website and Seller service. A Seller is responsible for the Buyer and order information that the Seller enters into VezaLink. We process that information to provide the Seller's workspace and Buyer ordering portal.

2. Data we process

  • Seller account data, including email address, password-derived authentication data, and Business name, currency, and timezone.
  • Seller workspace data, including catalog records, Buyer names and optional contact details, private-link state, orders, and order history.
  • Support and feedback messages sent through the service or by email.
  • Essential session, CSRF, and private portal-grant data needed to authenticate Sellers and scope Buyer portals.
  • Public website analytics such as an opaque keyed visit identifier, referrer domain, UTM values, and browser locale. The public analytics endpoint does not store raw IP addresses, user-agent profiles, full referrer URLs, or page history.
  • Subscription identifiers, status, and limited transaction history received from Paddle to provide billing and Seller entitlement features. VezaLink does not receive or store full payment card details.

3. Why we use data

  • to create accounts and provide the VezaLink Seller and Buyer workflows;
  • to secure accounts, private links, sessions, and the service;
  • to provide subscription billing, access control, and billing history;
  • to answer support requests and improve reliability; and
  • to understand aggregate public website traffic using first-party analytics.

4. Legal bases

We process data as needed to perform the service contract, for legitimate interests in security, support, service operation, and limited product analytics, to comply with legal obligations, and with consent where consent is required for optional communications or cookies.

5. Service providers and sharing

We share data with service providers needed to run VezaLink, such as hosting, database, email, security, and support providers, under appropriate contractual and security controls. Paddle acts as the Merchant of Record and processes subscription payments, billing, tax handling, refunds, and related customer information under its own terms and privacy notice. We may also disclose data to professional advisers or public authorities where required by law or necessary to protect rights, safety, or the service.

6. Retention

We keep account, workspace, and order data while it is needed to provide the service, support business history, resolve disputes, or meet legal obligations. Public analytics records are retained for up to 180 days by default. Paddle retains payment and billing records according to its own policies and legal obligations. We delete or anonymize data when it is no longer needed, subject to required retention.

7. Cookies

VezaLink uses essential session and security cookies. The public landing page may set an HttpOnly first-party analytics cookie used to produce an opaque keyed visit identifier. The analytics record is limited to the fields described above and is retained for up to 180 days. Paddle may use cookies or similar technologies in its checkout; see Paddle's privacy and cookie information for that processing.

8. International transfers and security

Service providers, including Paddle and hosting providers, may process data internationally. Where required, transfers use an applicable adequacy decision, standard contractual clauses, or another lawful safeguard. We use appropriate technical and organizational measures, including encryption in transit, access controls, session security, and protected password storage.

9. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or port your personal data, object to processing, withdraw consent, and complain to a supervisory authority. Contact support@vezalink.com to make a request. We may need to verify your identity before responding.