1. Purpose
This Privacy Policy describes how VECTARYS S.A.R.L. ("VECTARYS", "we", "our", "us") collects, processes, and protects personal data through its websites, applications, AI-driven platforms, automation tools, and digital services (collectively, the "Services").
By accessing or using our Services, you acknowledge that you have read and understood this Policy.
2. Data Controller
Entity Information
- Entity: VECTARYS S.A.R.L.
- RNE: ZIK5SS6U48AXI6
- MF: 1935702E/A/M/000
- Head Office: Avenue Fayçal Ibn Abdelaziz, 8050 Hammamet, Tunisia
- Email: hello@vectarys.com
VECTARYS acts as the Data Controller for all personal data processed via its Services.
3. Data Collected
We only collect data strictly necessary for the operation, improvement, and security of our Services. The categories include:
Identification Data
- name, email address, company name, job title, professional contact details.
Technical Data
- IP address, browser type, device information, operating system, access times, approximate geolocation (non-precise), system logs.
Usage Data
- pages viewed, actions performed, navigation patterns, session duration, interaction logs with digital tools and AI features.
Communication Data
- messages sent through forms, emails, or live communication channels.
AI Interaction Data (if applicable)
- inputs provided to automated systems,
- outputs or recommendations generated by AI modules.
Note: AI data is processed solely to provide the service and improve model performance, never for advertising.
No sensitive personal data (religious beliefs, health data, political opinions, etc.) is collected or processed.
4. Purpose of Processing
Personal data is processed for the following legitimate purposes:
- Providing access to and operation of the Services.
- Managing communication and user inquiries.
- Monitoring performance, analytics, and service optimization.
- Ensuring cybersecurity, fraud prevention, and system integrity.
- Improving AI-driven and automated functionalities.
- Complying with legal or regulatory obligations.
No automated decision-making producing legal effects is performed without explicit user consent.
5. Legal Basis
Processing is based on one or more of the following legal grounds:
- Performance of a contract or pre-contractual steps.
- Legitimate interest, such as security, service improvement, analytics, and user support.
- Compliance with legal obligations under Tunisian or international frameworks.
- User consent, when required (e.g., optional forms, cookies).
6. Data Retention
We retain personal data only for the time strictly necessary to fulfill the purposes for which it was collected or to meet legal requirements.
After the retention period:
- data is securely deleted, anonymized, or pseudonymized;
- logs may be retained longer if required for security or compliance.
7. Data Security
VECTARYS implements strict technical and organizational measures to prevent unauthorized access, loss, misuse, or alteration of personal data.
These measures include:
Encryption
Encryption in transit and at rest
Access Control
Access restriction and authentication policies
Secure Infrastructure
Secure server environments
Security Testing
Periodic penetration tests and security audits
- monitoring of anomalies and intrusion attempts.
Practices are aligned with ISO 27001, ISO 27018, and industry-standard cybersecurity frameworks.
9. International Transfers
If data is transferred outside Tunisia or the European Union, VECTARYS ensures:
- adequate protection measures,
- standard contractual clauses if required,
- compliance with Article 46 of GDPR and Tunisian data protection laws.
Such transfers apply only when strictly necessary for service operation (e.g., cloud hosting, secure backups).
10. User Rights
Users may exercise the following rights:
Access
Access to their personal data
Rectification
Rectification of inaccurate or outdated information
Deletion
Deletion ("right to be forgotten") where legally applicable
Restriction
Restriction of data processing
Objection
Objection to certain processing activities
Portability
Data portability, where technically feasible
Requests should be submitted to: hello@vectarys.com
We may require proof of identity to verify the requester.
12. Changes to this Policy
VECTARYS may update this Policy periodically to reflect legal, technical, or operational changes.
The "Last updated" date will always indicate the latest version.
Continued use of our Services constitutes acceptance of the updated Policy.
13. Governing Law
This Privacy Policy is governed by Tunisian law.
If international frameworks impose stricter protection, the higher standard will prevail.
Disputes fall under the exclusive jurisdiction of the courts of Nabeul, Tunisia, unless otherwise required by law.