Privacy policy
Last updated 30 October 2026
Vetrina is a trading name of Endpoint7, a sole proprietorship registered in the Netherlands (Chamber of Commerce number 96919485), at Byrdstraat 37, 5623 PL Eindhoven. This page explains what personal data we collect, why, who else handles it and how long we keep it. For any question or request, write to tudor@endpoint7.com.
When you request access
The form on our website asks for your name, company, work email and an optional message. We use them only to reply to you and, if you go ahead, to set up your organization. The legal basis is your own request, before any agreement (GDPR article 6(1)(b)). The form reaches us as an email (Zoho Mail, in the EU). If no agreement follows, we delete it within 12 months of our last contact; if you become a customer, it stays part of our correspondence with you.
When you use Vetrina
Your organization's users sign in through Clerk, which holds each user's name, email address, organization and sign-in details. We record what happens in each project (an analysis started or finished, a report downloaded, a document's type changed, the reviews you make) to run the service and to improve it. The legal basis is our agreement with your organization and our legitimate interest in providing and improving the service for its users (article 6(1)(b) and (f)). We keep this while your organization's account is open.
The documents you upload
Project documents can contain personal data, such as names in drawing title blocks. For these we process data on your organization's behalf, under the data processing agreement in our contract with it, and only to analyse the documents for you.
To analyse your documents we send them to AI models. The AI providers keep nothing, except Google, which may keep them for a short time for safety monitoring, and your documents are never used to train AI models. Your files stay until you delete them; a deleted file leaves our backups within 30 days. We use a project to improve Vetrina only if your organization explicitly shares it with us.
Logs and error reports
Our servers keep technical logs (errors, the time of each request) for as long as needed to keep the service running and secure. When something breaks, the server or your browser sends an error report to Sentry, without cookies, headers, request contents or user details. The legal basis is our legitimate interest in a working, secure service (article 6(1)(f)).
Cookies
Vetrina sets only the cookies needed to sign you in, through Clerk. There are no analytics or advertising cookies.
Who handles data for us
We run Vetrina with a few service providers: Hetzner, Clerk, OpenRouter and the AI model providers behind it (today Google and OpenAI), Cloudflare, CloudConvert, Sentry and Zoho. Our servers are in the EU. Clerk, OpenRouter, Cloudflare, Sentry and the AI model providers are United States companies; for them we rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Your rights
You can ask to see, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable form. Write to tudor@endpoint7.com; we reply within one month. For documents your organization uploaded, we pass the request to your organization, which decides. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens. We make no automated decisions about people.
Changes
When this policy changes, we update this page and its date.