Veyro B.V. (“Veyro”, “we”, “us”) builds software that helps revenue teams forecast, prioritise and act on their pipeline. This policy explains what personal information we handle, why we handle it, and the choices you have.
01
Who we are
Veyro B.V. is a company incorporated in the Netherlands, with offices in Amsterdam and New York. For the personal information we collect to run our website, marketing and customer accounts, Veyro is the controller. For the data our customers bring into the platform, we act as a processor on their behalf — see section 4.
Our Data Protection Officer can be reached at privacy@veyro.ai.
02
Information we collect
We collect only what we need to provide and improve Veyro. Depending on how you interact with us, this includes:
Account information — your name, work email, company, role and password when you sign up or are invited to a workspace.
Billing information — company billing address, VAT number and payment method. Card details are handled by our payment provider and never stored on our servers.
Usage information — pages visited, features used, device and browser type, IP address and approximate location, collected through logs and privacy-friendly analytics.
Communications — messages you send to support or sales, survey responses and event registrations.
We do not knowingly collect sensitive personal data, and Veyro is not intended for anyone under 16.
03
How we use information
We use personal information to:
Create and secure your account, authenticate users and prevent fraud or abuse.
Provide, maintain and troubleshoot the platform, including customer support.
Send service messages such as security alerts, invoices and changes that affect you.
Understand how Veyro is used, so we can fix problems and improve features.
Send product news and event invitations where permitted — you can opt out at any time.
We do not sell personal information, and we do not use it for cross-context behavioural advertising.
04
Customer Data and AI features
“Customer Data” means the CRM records, emails, call transcripts, billing data and other content our customers connect to Veyro. We process Customer Data only on our customers’ documented instructions, under our Data Processing Agreement.
Forecasts, Deal Health scores and Agents are generated by models that run on each customer’s own data. We do not use Customer Data to train foundation models shared across customers, and our AI sub-processors are contractually prohibited from retaining or training on it.
05
Legal bases for processing
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
Contract — to provide the services you or your employer signed up for.
Legitimate interests — to secure, improve and market our services, balanced against your rights.
Consent — for optional cookies and certain marketing emails, which you can withdraw at any time.
Legal obligation — to keep financial records and respond to lawful requests.
07
International transfers
Veyro is hosted in the European Union by default, with optional data residency in the United States. Where personal information is transferred outside the EEA or UK, we rely on Standard Contractual Clauses and the UK Addendum, backed by technical safeguards such as encryption in transit and at rest.
08
Retention and security
We keep personal information for as long as your account is active, and for a limited period afterwards to meet legal, tax and audit requirements. Customer Data is deleted within 30 days of contract termination, unless a customer asks us to delete it sooner.
Veyro is SOC 2 Type II audited. We encrypt data with TLS 1.2+ in transit and AES-256 at rest, enforce single sign-on and least-privilege access for staff, and commission independent penetration tests every year.
09
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. Workspace admins can manage most of this directly in Settings.
To exercise a right, email privacy@veyro.ai. We respond within 30 days. You can also complain to your local data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.
10
Changes and contact
We update this policy when our practices change. If a change is material, we will email account owners at least 30 days before it takes effect. The date at the top of this page shows when it was last revised.
Questions? Write to privacy@veyro.ai, or to Veyro B.V., Attn: Privacy, Amsterdam, the Netherlands.