Legal

Privacy Policy

A clear account of what Vadrel collects, why we use it, who receives it, and how you can exercise your rights.

Last updated: August 23, 2026

Who is responsible

Vadrel is responsible for the personal information described in this notice. For privacy questions, requests, or concerns, email hello@vadrel.com. We will route a request to the person responsible for handling it.

Information we collect

Vadrel follows a data-minimal approach. We collect information from you, from the systems you authorize, and from ordinary operation of the website.

  • Information you send us. If you email Vadrel, we receive the email address, name, message, attachments, and other details you choose to include. The website has no contact form and does not store a form submission.
  • Administrator account information. Authorized administrators sign in through Auth0. Vadrel receives the account identifier, verified email address, display name, and sign-in status needed to authorize the private workspace.
  • Private workspace content. Authorized administrators may enter journal posts, CRM names, organizations, email addresses, notes, follow-up dates, and uploaded media. This content is not collected from public site visitors; it is entered for Vadrel's internal operations.
  • Technical and security information. The hosting server may generate operational logs containing an IP address, request path, timestamp, response status, browser or device information, and referrer. We use this information for availability, abuse prevention, and security—not advertising or behavioral profiling.

How we use information

We use information only for purposes connected to the work described here:

  • to operate, maintain, and secure the website and Journal;
  • to respond to inquiries and evaluate a potential business relationship;
  • to authenticate authorized administrators and protect the private workspace;
  • to manage internal CRM follow-up, content, media, and business records;
  • to detect abuse, troubleshoot failures, and improve reliability; and
  • to meet legal, accounting, audit, and enforcement obligations.

Where the GDPR or UK GDPR applies, our legal bases may include taking steps at your request before a contract, our legitimate interests in operating and securing Vadrel, compliance with a legal obligation, and consent where we specifically request it. We do not use information for an incompatible purpose without giving any notice or obtaining any consent required by law.

Cookies and similar technologies

Public pages do not use analytics, advertising trackers, tag managers, tracking pixels, fingerprinting, or nonessential cookies. The private admin area uses only cookies needed for authentication: short-lived Auth0 sign-in transaction cookies and a secure admin session cookie that expires after eight hours. The cookies are HttpOnly and restricted by Secure and SameSite controls. You can block cookies in your browser, but the private workspace will not function without its necessary session cookie.

When we share information

We share the minimum information needed with service providers that help us operate Vadrel:

  • Hosting and infrastructure providers operate the server, storage, backups, TLS, and security logs.
  • Auth0, a product of Okta, provides administrator authentication and password-reset services. See the Auth0/Okta privacy policy.
  • Proton Mail helps Vadrel receive and respond to email at hello@vadrel.com. Review Proton's own privacy notice for its processing of email data.
  • Advisors, authorities, or other parties may receive information when necessary to comply with law, protect rights and safety, or investigate misuse.

Vadrel does not sell personal information, share it for cross-context behavioral advertising, operate an advertising network, or use a data broker. We do not knowingly sell or share personal information about people under 16.

International processing

Our providers may process information in countries other than the one where you live. Where a transfer law applies, Vadrel assesses the provider and uses an adequacy decision or another safeguard recognized by that law, such as appropriate contractual clauses. You may contact us for more information about the safeguards that apply to a particular request.

Retention and deletion

We keep information only for as long as it is needed for the purpose collected, a legitimate business record, security, dispute resolution, or a legal obligation. In practice:

  • email inquiries are retained while we respond and only as long as needed for the resulting business relationship or records;
  • operational logs are rotated and kept for a limited period, with longer retention only when needed for security, abuse, or outage investigation;
  • admin session data expires automatically, and Auth0 account data is retained while the account is authorized or as needed for security and audit; and
  • workspace records and uploaded media remain until an authorized administrator deletes them or the business and legal purpose ends. Recoverable deleted records or backups may persist until their normal purge or rotation cycle.

Your privacy rights

Depending on where you live and which law applies, you may have the right to access or know what we hold, correct inaccurate information, delete it, receive a portable copy, restrict or object to certain processing, withdraw consent, and complain to a supervisory authority. California and other U.S. state laws may also provide rights to opt out of sale, sharing, targeted advertising, or certain sensitive-data uses. Vadrel does not sell or share for targeted advertising, so there is no such activity to opt out of here.

Send a request to hello@vadrel.comwith the subject “Privacy request.” We may ask for information needed to verify the request and protect another person's data. We will respond within the time required by applicable law, will explain any lawful limitation, and will not discriminate against you for exercising a privacy right. If a law gives you a right to appeal, you may reply to our decision to request review.

If you are in the EEA, the UK, or Switzerland, you may also lodge a complaint with your local data-protection authority. If you are in the UK, the supervisory authority is the Information Commissioner's Office.

Security and automated decisions

Vadrel uses reasonable administrative, technical, and organizational safeguards appropriate to the information we handle, including HTTPS, access-controlled administration, secure session cookies, rate limiting, and protected storage. No system or transmission is completely secure, so we cannot promise absolute security.

This website does not make decisions about visitors using solely automated processing or profiling that produce legal or similarly significant effects. Any AI workflows delivered for a client are governed by the applicable client agreement and data-processing terms, not this public website notice.

Children's privacy

Vadrel's website and services are intended for business audiences and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information to us, contact hello@vadrel.com so we can review and delete it where appropriate.

Changes to this policy

We may update this notice when our practices, providers, or legal obligations change. The date above identifies the current version. We will provide any additional notice required for a material change.