Privacy & Cookie Policy

1. Who is responsible

Vitrum Labs is the data controller for personal data processed in Project Scoping. Contact: privacy@vitrumlabs.com.

2. What we collect

Only what the service needs:

• Account — name and email from Google, Apple, or your sign-in link.
• Conversation & plan — messages you send and the plan drafted from them; these are a business record of what was scoped.
• Technical — security logs (IP, timestamps) and anti-abuse signals.
• Analytics — usage events, only if you consent.

3. Why, and on what legal basis

• Contract — running your account, saving sessions, drafting and publishing your plan.
• Legitimate interests — security, abuse prevention and service integrity.
• Consent — analytics cookies; withdraw any time under Cookie settings.

4. AI processing

Your messages are processed by Anthropic's Claude models to draft your plan. They are used only to provide this service and are not used to train AI models.

5. Who processes data for us

Google Cloud / Firebase (hosting, sign-in, storage — EU region), MongoDB Atlas (session database — EU region), Anthropic (AI processing), Asana (published plans, shared with our delivery team) and Google Analytics (with consent). Each acts under a data-processing agreement; transfers outside the EEA rely on Standard Contractual Clauses.

6. How long we keep it

Scoping sessions: 24 months after last activity. Security logs: 90 days. Analytics: 14 months. Delete your account and everything tied to it is removed within 30 days, except records we must keep by law.

7. Your rights

You can ask for access, correction, deletion, portability, or restriction, and object to processing based on legitimate interests — email privacy@vitrumlabs.com. You can complain to the Irish Data Protection Commission (dataprotection.ie).

8. Cookies we use

These cookies are set by the scoping service at scoping.vitrumlabs.com; change your choice any time via Cookie settings in its footer. This landing site sets no cookies at all.

9. Changes

If we change this policy materially, we'll tell you in the service before the change applies.