Legal

Privacy Policy

Last updated: 17 May 2026

Summary in plain English

  • The Veiltag product runs on your computer. It does not send your files anywhere.
  • The Veiltag website (this site) collects very little: aggregate, cookieless page analytics, and — if you choose to submit the beta signup form — your name, email and job title.
  • We use four service providers: Vercel (hosting), Cloudflare (DNS), Plausible (analytics), and Tally (signup form). No advertising, no tracking pixels, no cross-site profiling.
  • You can ask us at any time what we hold about you, ask us to delete it, or complain to the ICO. Email info@veiltag.com.

Contents

  1. Who we are
  2. What we collect, and why
  3. Legal basis for processing
  4. Service providers (processors)
  5. International transfers
  6. How long we keep things
  7. Security
  8. Your rights under UK GDPR
  9. Children
  10. Changes to this notice
  11. Contact and complaints

1. Who we are

The data controller is Pamela Berte, trading as Veiltag, based in London, United Kingdom. "We", "us" and "our" in this notice mean Pamela Berte operating Veiltag.

Contact: info@veiltag.com.

2. What we collect, and why

Visiting the website

When you visit any page on veiltag.com, we use Plausible Analytics to record an aggregate page view: the URL you visited, the referring URL, the browser and operating system family, the country (derived from IP, then discarded), and the time. Plausible does not use cookies, does not store IP addresses, and cannot identify you across sites or visits.

We use this only to understand which pages are read and which referral sources are working.

Watching the demo video

The demo video is served from this site (Vercel). Loading the video creates an HTTP request log entry at our host (Vercel) which includes your IP address. Vercel retains those logs for a short period for operational and security purposes.

Submitting the beta signup form

The signup form on the homepage is hosted by Tally. When you submit it, you give us your name, email address and job title. We use this only to:

  • Decide whether to invite you to the closed beta;
  • Send you the beta invitation and beta-related updates;
  • Reply to anything you tell us in the form.

We do not use beta signup data for advertising, profiling, or any other purpose. We do not sell it. We do not share it beyond the processors named below.

Emailing us

If you email info@veiltag.com, the message and your email address reach our mailbox and stay there until we no longer need them.

What we do not collect

  • No advertising or marketing identifiers.
  • No cross-site tracking pixels.
  • No financial information, postal address, telephone number, or any sensitive (special category) data.
  • No content from any client files. The Veiltag product runs locally on your computer and does not transmit file contents to us — see the Terms of Service and the how-it-works section.

3. Legal basis for processing

Under UK GDPR Article 6 we rely on:

  • Consent (Art. 6(1)(a)) — for storing your beta signup details and contacting you about the beta. You can withdraw consent at any time by replying "unsubscribe" or emailing info@veiltag.com.
  • Legitimate interests (Art. 6(1)(f)) — for aggregate, cookieless site analytics (to understand which pages and referrers are useful), and for keeping basic server access logs for security and operational reliability. We have considered the impact on your rights and concluded that the minimal, non-identifying nature of Plausible and the short retention of Vercel/Cloudflare logs makes this proportionate.

4. Service providers (processors)

The Veiltag website uses these four services. No others.

Service What it does Location Their privacy notice
Vercel Static hosting + global edge network. Holds the HTML/CSS/JS/video and serves them to your browser. United States; global edge vercel.com/legal/privacy-policy
Cloudflare DNS for veiltag.com. Routes your browser to the correct server. United States; global cloudflare.com/privacypolicy
Plausible Analytics Cookieless aggregate site analytics. Server-located in the EU. European Union (Germany) plausible.io/data-policy
Tally Hosted form provider. Receives and stores beta signup submissions. European Union (Belgium) tally.so/help/gdpr

Each of these acts as a processor on our behalf (we remain the controller of the data). Each has its own data processing terms which we accept when we use the service. If any of these services change or we add another, we will update this notice and the Cookie Policy.

5. International transfers

Vercel and Cloudflare are US-headquartered companies. Beta signup data stored in Tally is held in the European Union; Plausible analytics is also in the European Union. Where personal data is transferred to or stored in the United States by Vercel or Cloudflare, those transfers are made under the EU Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), and rely on those providers' Data Processing Addenda which we have entered into.

6. How long we keep things

  • Beta signup data (name, email, job title): held in Tally for as long as the beta runs, and for up to 12 months after you tell us to remove you or after we close the beta — whichever is sooner. After that we delete it from Tally.
  • Plausible analytics: aggregate counts only; no per-visitor records to retain. Plausible keeps aggregate stats indefinitely so historical pageview totals remain comparable.
  • Vercel and Cloudflare access logs: retained by those providers per their own policies (typically a few days for raw logs).
  • Emails to info@veiltag.com: kept for as long as we reasonably need them to answer you and document our reply. If you ask us to delete an email exchange, we will.

7. Security

The site is served over HTTPS with HSTS, a strict Content Security Policy, and standard security headers enforced at the Vercel edge. Beta signup data sits inside Tally, which is encrypted in transit and at rest. We have a vulnerability disclosure contact at /.well-known/security.txt. No system is perfectly secure; we do our best.

8. Your rights under UK GDPR

You have the right to:

  • Ask what personal data we hold about you (access);
  • Ask us to correct it (rectification);
  • Ask us to delete it (erasure);
  • Ask us to restrict how we use it;
  • Object to our processing it (where we rely on legitimate interests);
  • Receive a copy in a portable format;
  • Withdraw any consent you previously gave us.

To exercise any of these, email info@veiltag.com. We will respond within one month.

If you think we have mishandled your data, you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint. We'd ask you to raise it with us first, but you don't have to.

9. Children

The Veiltag service is for adults working with documents in professional contexts. We do not knowingly collect personal data from anyone under 18. If you believe a child has submitted information to us, please email info@veiltag.com and we will delete it.

10. Changes to this notice

If we change what we collect, who processes it, or how long we keep it, we will update this page and the "Last updated" date at the top. Material changes will also be reflected in the Cookie Policy and (where they affect security headers) in the deploy config.

11. Contact and complaints

Email: info@veiltag.com
Post:

Pamela Berte trading as Veiltag
London, England
United Kingdom

UK supervisory authority: Information Commissioner's Office (ICO).

← Back to Veiltag