Privacy Policy

Who is responsible

The data controller for the personal data described here is Aljaž Gračner s.p., Ljubljanska cesta 45, 2327 Rače, Slovenia (registration number 7471327000), which operates Vinci. Contact: support@use-vinci.com.

What we collect

• Account: your email address and a salted hash of your password (we never store the password itself), and sessions.
• Content: the channels you follow, the videos you add to your vault, the newsletter issues that arrive at your vault inbox, retrieved transcripts and metadata, and the derived index (text chunks, embeddings, AI summaries).
• Usage: pipeline run logs and pseudonymous analytics events (internal account IDs only - never your email).
• Billing: handled by Stripe; your card number never touches our servers. We store your plan and Stripe references.

Where it lives

All content and account data is stored in the EU (Frankfurt, Germany).

Who processes data for us

We use a small number of service providers ("processors") strictly to run Vinci, each bound by a data processing agreement:

• EU cloud infrastructure - hosting, storage, database, queues, and search; your vault lives in the EU (Frankfurt).
• Transcript retrieval - a provider that fetches publicly available transcripts and metadata for the videos you add.
• AI analysis - services that generate summaries and build the search index from your vault.
• Stripe - payments and tax; they receive billing details, never your vault.
• Google Analytics - site statistics, only after you accept the cookie banner.
• Transactional email delivery (EU region) - your daily digest and account emails.

A detailed processor list is available on request via support@use-vinci.com.

When you connect your own AI assistant (e.g. ChatGPT or Claude) to Vinci, the vault content it asks for on your behalf - matching excerpts, titles, summaries, transcripts, channel names and account counts - and, so it can recognize your account, your email address flow to that assistant under your agreement with its provider. It can also save videos, follow channels and save or skip triage items when you ask it to; it never deletes anything. That connection exists only because you set it up, and you can disconnect it at any time.

Cookies and analytics

Essential cookies: a session cookie (sign-in) and vinci_consent (remembers your analytics choice). Google Analytics cookies (_ga) are set only after you accept the cookie banner; declining is remembered and respected. We do not run ads and never sell data.

Legal bases (GDPR)

Performing our contract with you (account, content, billing), legitimate interest (security, service usage measurement with pseudonymous IDs), and consent (analytics cookies).

Retention

Content: until you delete it (removing a channel with its content, or deleting a video, purges its files, index entries, and vectors). Account data: while your account exists. Analytics: 14 months. Operational logs: weeks, not months.

Your rights

You can access, correct, export, or delete your data, object to processing, and withdraw consent at any time - most of it directly in the app (delete channels and videos, export your vault, cookie banner), the rest via support@use-vinci.com, including full account deletion. You may lodge a complaint with the Slovenian Information Commissioner (IP-RS) or your local supervisory authority.

International transfers

Where a provider processes data outside the EU, transfers rely on the EU Standard Contractual Clauses and equivalent safeguards.

Changes

We'll announce material changes to this policy by email or in the dashboard before they take effect.