Privacy Policy

1. Controller

VantaOS is operated by Nicola Viola, c/o Online-Impressum #7888, Europaring 90, 53757 Sankt Augustin, Germany. Full imprint and contact details: mein.online-impressum.de/vantaos.

2. Data We Collect

At this stage, VantaOS operates a landing page and early-access waitlist only. We do not currently process user conversations, workspace content, memory graphs, or knowledge bases. We collect:

• Waitlist email address — when you join our early-access waitlist.
• Attribution data — optional UTM parameters and referral codes to understand how you found us.
• Technical server logs — IP address, user agent, timestamp, and requested URL. Retained for 30 days for security and debugging.
• Analytics data — if analytics tools are enabled, we may collect anonymized page views, click events, and conversion funnels. No cross-site tracking or advertising cookies.

3. Purpose & Legal Basis

• Operating the website and managing the waitlist — Art. 6(1)(b) GDPR (contractual necessity) and Art. 6(1)(f) GDPR (legitimate interest).
• Sending early-access updates and invitations — Art. 6(1)(a) GDPR (your explicit consent via the waitlist form).
• Preventing abuse and ensuring security — Art. 6(1)(f) GDPR (legitimate interest).
• Understanding waitlist growth and website performance — Art. 6(1)(f) GDPR (legitimate interest), or Art. 6(1)(a) GDPR if consent is collected.

4. Data Processors

We use the following third-party processors:

• Vercel Inc. (USA) — hosting and deployment of the website. Processed data may include IP address, user agent, timestamp, and request metadata. Data is processed on Vercel's infrastructure (US/EU regions). Transfer outside the EEA is based on Standard Contractual Clauses.
• Neon (USA) — PostgreSQL database hosting for waitlist storage. Processed data: email addresses and attribution fields. Data stored in AWS US-East-1. Transfer outside the EEA based on Standard Contractual Clauses.
• Resend Inc. (USA) — transactional email delivery (waitlist confirmations). Processed data: email address and confirmation link. Transfer outside the EEA based on Standard Contractual Clauses.
• PostHog (EU-hosted) — product analytics, if enabled. Processed data: anonymized page views and click events stored in localStorage (not cookies). Data processed within the EU (eu.i.posthog.com). No third-party tracking or advertising.

5. Data Retention

• Waitlist emails: retained until you withdraw consent or request deletion.
• Unconfirmed waitlist entries: 7 days, then automatically deleted.
• Server logs: 30 days, then automatically purged.
• Analytics data: aggregated and anonymized; identifiable data is not retained beyond session scope.

6. Your Rights (GDPR)

You have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectify inaccurate data (Art. 16 GDPR)
• Erasure — 'right to be forgotten' (Art. 17 GDPR)
• Restrict processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, contact us at vantaos@mail.online-impressum.de.

7. Cookies & Tracking

We use privacy-first analytics tools that do not rely on third-party advertising cookies:

• PostHog (if enabled) — product analytics stored in localStorage (not cookies). Tracks anonymized events to improve the product. You can clear localStorage in your browser to opt out at any time.
• Vercel Analytics / Speed Insights — anonymized, cookie-less page view and Core Web Vitals metrics. Data is aggregated and cannot identify individuals.

We do not use third-party advertising cookies, retargeting pixels, or social media trackers.

8. International Transfers

Where data is transferred outside the EEA (to Vercel, Neon, or Resend in the USA), we rely on Standard Contractual Clauses (SCCs) as adopted by the European Commission to ensure an adequate level of data protection.

9. Changes to This Policy

We may update this policy as our services evolve. Material changes will be communicated via email to waitlist members. The latest version is always available at this URL.