Privacy Policy

1. Who we are

VantyRex Systems is a custom software engineering company based in Deir al-Asad, Northern District, Israel. For any privacy matter, contact info@vantyrex.com.

For data you submit to us as a visitor or prospective client, VantyRex is the data controller. For data we process inside systems we build and operate for clients, we act as a data processor under the applicable services agreement.

2. What we collect

Project inquiry form: company/project name, work email, your role, selected engagement tier, your project descriptions, budget range, timeline, and NDA preference.

Technical context sent with an inquiry: browser user-agent, browser language, screen resolution, timezone, a generated reference ID, and the submission timestamp. We use this to detect spam and understand what devices to support.

Server logs: IP addresses and request metadata, used for security, rate limiting, and abuse prevention.

Contract signing (clients only): the signatory name, phone number and email used for verification, a one-time code, your handwritten signature image (stored encrypted), the signing IP address, and cryptographic audit hashes of the executed document.

Browser storage on your device: your language preference (localStorage key "vrx.lang") and, for the installable app, standard offline caches. Admin session tokens exist only for VantyRex staff.

3. What we do NOT do

No advertising cookies. No third-party analytics or tracking pixels. No sale or rental of personal data. No profiling for marketing purposes.

4. Why we process data (legal bases)

To answer your inquiry and prepare a proposal — steps taken at your request prior to a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to business contacts (Art. 6(1)(f)).

To execute and evidence agreements — performance of a contract (Art. 6(1)(b)) and compliance with legal obligations to retain transaction records (Art. 6(1)(c)).

To secure our systems (logs, rate limiting, abuse prevention) — legitimate interest (Art. 6(1)(f)).

5. Where data lives & sub-processors

Our infrastructure runs on Amazon Web Services (databases, file storage, email delivery — primarily in the us-east-1 region, United States). Transfers outside your jurisdiction are protected by AWS's standard contractual clauses.

Sub-processors we use: Amazon Web Services (hosting, storage, email via SES), Twilio (SMS / WhatsApp verification codes), and Amazon Bedrock (internal AI assistance for our own operations — client inquiry content is not used to train models).

6. Retention

Inquiries: deleted automatically 90 days after submission unless we are in an active conversation with you.

Security logs: retained approximately 30 days.

Contract drafts: deleted automatically 30 days after creation if never executed.

Executed agreements and their audit records: retained for as long as the law requires for transaction and tax records.

Language preference: stays in your own browser until you clear it.

7. Your rights

You may request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and a portable copy of data you provided. Write to info@vantyrex.com and we will respond within 30 days.

If you are in the EU/EEA you may lodge a complaint with your local supervisory authority. In Israel, the Privacy Protection Authority is the competent regulator.

8. Cookies & local storage

We set no cookies. We use only essential browser storage: your language and theme choices, offline caches if your browser keeps the site for offline use, and — on the client portal and admin only — a sign-in token that is deleted when you close the tab. Because there are no non-essential cookies or trackers, no cookie consent banner is required. Full details: /cookies.

9. Client project data

Data inside systems we build or operate for clients is governed by the services agreement (including confidentiality, breach notification within 72 hours, and processor obligations) — not by this visitor policy.

10. Changes

We will update this policy when our practices change and revise the effective date above. Material changes will be highlighted on this page.