VECTORIA · Legal centre Privacy Your account connects the products included in your plan. Your local files remain yours; remote functions explain the information they need before you use them. Edition dated 25 September 2026 2026-09-25-subscriptions-privacy-v3 Applies to new subscriptions accepting this version. 1. Controller and contact Juan Francisco Rodríguez del Rosario, Spanish tax ID 78522240X, operates Vectoria and controls account, subscription, security and support data. Address: Calle Hoya del Rosario, 98, 35016 Las Palmas de Gran Canaria, Las Palmas, Spain. Contact privacidad@vectoriacivil.com for privacy and rights. See the legal notice. When a professional customer submits third-party data and decides its purpose, that customer is the controller and Vectoria is the processor under the DPA. Paddle independently controls the data it processes for price and tax estimates, purchases and payments under its privacy policy. 2. Account, purchases and team We process email, account identifiers, profile information you provide, verification, sessions, permissions, Civil devices and access dates. If you select Google sign-in where offered, we receive the authorised identity and basic profile; that does not grant access to Gmail, Drive or your files. When tax estimates are enabled, the pricing page and account area load Paddle before checkout opens. Paddle receives your IP address and technical connection data, together with the queried price identifiers and USD currency, to estimate your location and display prices including tax. Vectoria does not attach your email, tax identifier, billing address or project data to this request. The estimate does not create a purchase or take payment; the final amount depends on the fiscal details you provide in Paddle checkout. Purchases provide customer, transaction and subscription identifiers, plan, currency, amounts, taxes, periods and payment, renewal, cancellation and refund status. For business or professional purchases, we collect and retain the name of the purchasing business or professional with the purchase. We send it to Paddle when opening checkout to prefill it; in the account area this purchase detail is shown only to the owner, not to other Studio members. It is not included in the pre-checkout price request. If you choose to add full invoice details, Vectoria temporarily processes the address and local tax or company registration number you provide and sends them to Paddle before payment. We do not save them in browser storage or add a duplicate fiscal profile to your account; Paddle retains the billing entities. The local reference is not used to request a tax exemption. VAT ID validation takes place in Paddle. We may receive the billing and tax status information necessary to evidence the transaction and provide the service. We do not receive or store full card numbers or security codes. For Studio, we record the administrator, assigned users’ emails and identities and a history of assignments and revocations. Administrators see information needed to manage seats and subscription usage; this does not by itself grant access to each user’s local projects. The customer must inform users about this relationship and policy. 3. Purposes and legal bases Account, licensing, product access, payments and credits are processed to perform the contract or respond to a service request. Pre-checkout price and tax estimates provide pre-contractual pricing information. Paddle explains the legal bases for its independent processing in its policy. Contractual and fiscal retention also fulfils legal obligations. Proportionate security, fraud, abuse and recovery controls serve legitimate interests in protecting the service and users; applicable objection rights remain available. Marketing requires a separate choice where legally necessary and always provides an unsubscribe mechanism. Purchasing, acknowledging this privacy information or accepting the DPA does not consent to advertising. We do not use your projects for advertising or make decisions with legal effects based solely on advertising profiles. 4. Files, agents and external connections Opening an IFC in Viewer or a BC3 in Cost does not upload it to the account service. Civil projects, local copies and drafts remain on your device unless you activate a transmitting function or send them to support. A shared account does not imply automatic file synchronisation. Using Vector sends your instruction and necessary task context to Vectoria services and the inference provider TensorX. This may include names, quantities, geometry, properties or document fragments supplied to tools. Civil sends data according to the selected function and context. In Cost and Viewer, agents receive bounded tool results; merely opening a file does not send the entire original file. MCP connections for external agents are optional. Your chosen client and provider process authorised data under your own account and terms. Some applications offer an optional ChatGPT connection through your own OpenAI account; other MCP connections may use other providers. The connection flow identifies the recipient before authorisation. TensorX’s safeguards and location must not be assumed to apply to all external agents. If you enable Civil voice input, Google Cloud Speech receives real-time audio for transcription; the function does not deliberately save audio after the session. Transcribed text enters the instruction you decide to submit. If a Viewer image-generation function is enabled and you confirm transmission, Google Cloud Vertex AI receives the reference and instructions; capturing a view alone does not transmit them. Viewer’s specific information explains result storage and credits before generation. Vectoria does not use your files, instructions or results to train its own models or authorise third-party training without an express, separate agreement. External providers connected through your own account also follow your terms with them. Review what you send and avoid sensitive data, secrets or unauthorised third-party information. 5. Providers and transfers - Supabase: authentication, accounts and licence, access, contract and usage records. - Cloudflare: websites, network and security; web application sessions and associated technical storage. - Google Cloud: application and agent services, storage and downloads; voice when used and image generation when enabled and confirmed. - TensorX Limited, Ireland: managed Vector inference. Its agreement describes transient EU processing without prompt or response storage or training. Model developers do not receive this inference through TensorX. - Resend and Brevo: transactional messages and access codes according to the product; Google Workspace/Gmail for customer support communications. - Paddle: seller and independent controller for pre-checkout price and tax estimates, checkout, invoices, fraud prevention and payments. Google also processes sign-in when selected. External agents, including OpenAI if selected, identify their providers in their connection flow. Some services may involve access or processing outside the EEA. Where applicable, adequacy decisions, standard contractual clauses and supplementary safeguards are used. Ask privacidad@vectoriacivil.com for relevant regions and safeguards. We do not promise EU-only hosting for every product or provider. Civil’s optional global background directly connects to NASA GIBS with the IP address and image parameters including the visible geographical extent. It does not send the Vectoria account, project file or filename. NASA’s privacy policy applies. Other configured maps have their own providers. 6. Retention and security Account and subscription information is retained during the relationship and afterwards only as needed for legal obligations, rights, security, usage reconciliation or claims. Removing a seat revokes access but retains minimum assignment evidence. Complaint records are kept for at least one year, subject to longer mandatory periods. Account deletion does not erase records that must be retained under restricted access. Civil’s conversation library is local until you delete it. Local agent logs are cleaned at the next start or log write after thirty days; logs exactly linked to a conversation are also removed with that conversation. Civil’s remote operational events are kept for at most thirty days without prompt text or files. Account, access and payment reconciliation records are separate and may require longer retention. Cost and Viewer retire server-side agent context when the connection closes or expires; session limits detect a missed disconnection. Authorisation, reservation, measurement and reconciliation records are kept separately from project content. Locally saved projects and galleries remain until you remove them. Each application explains its own records; Civil’s thirty-day period does not automatically apply to all of them. TensorX states that it does not retain prompts or responses and may keep content-free usage metadata for up to twelve months for service purposes. Retention by external providers you choose follows their terms. Vectoria uses access controls, encryption in transit, separate secrets, minimisation and critical-operation records; no measure can promise zero risk. 7. Your rights Request access, rectification, erasure, objection, restriction, portability or consent withdrawal at privacidad@vectoriacivil.com. Identify your account and request; we seek only proportionate identity checks. You may complain to the Spanish Data Protection Agency or another competent authority. You can also contact Paddle for data it controls independently. Cancelling renewal, unsubscribing from marketing and deleting an account are different actions. Services are not directed at people under eighteen. Material processing changes will be communicated, with new consent where necessary. Further information: Cost privacy, Viewer privacy and website and portal cookies.