Privacy Policy

1. Controller

2. General Information on Data Processing

We process our users' personal data only to the extent necessary to provide a functional website and our services. Data is processed only with the user's consent or where permitted by law, in accordance with the GDPR principles of purpose limitation, data minimisation, and storage limitation.

3. Server Log Files

Each time our website is accessed, our hosting provider (Hostinger International Ltd., Švitrigailos str. 34, Vilnius, Lithuania) automatically collects: IP address (anonymised or full), date and time of access, name and URL of the retrieved file, referrer URL, browser, operating system, and access provider name. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in the technical provision and security of the website. Retention: log files are automatically deleted after a maximum of 7 days.

4. Contact Form & Email

5. AI Chatbot

This website offers an AI chatbot. Messages you type, together with the last few turns of the same conversation, are sent to our n8n instance and from there to Groq, Inc. (USA), which generates the reply using a large language model. Conversations are not stored in a database and are not used to train any model; they are held only in your browser for the duration of the page visit, plus temporarily in the workflow execution log on our server. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering visitor questions efficiently). Please do not enter sensitive personal data into the chat — use email or the contact form for anything confidential.

6. Interactive Demos

The portfolio contains live demos you can submit data to — a lead qualification form, an inbox triage demo, and a hotel booking demo. Anything you enter there is sent to our n8n instance for processing so the demo can return a result. The inbox triage demo passes the text you enter to Groq, Inc. (USA) for classification. The hotel booking demo stores the details you submit in an n8n data table and sends a confirmation email via Resend. These demos are for illustration only: please enter test data rather than real personal data. Legal basis: Art. 6(1)(a) GDPR — you decide whether to submit anything at all. Demo data is deleted periodically and is never used for any other purpose.

7. Recipients and Processors

The following providers are involved in operating this website. Where a provider acts as a processor, a data processing agreement pursuant to Art. 28 GDPR is in place; our n8n instance is self-hosted on our own server and is not a third party:

8. Transfers to Third Countries

Resend, Groq and Google are based in the USA. Transfers to them take place on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where the provider is certified, the EU-US Data Privacy Framework. Despite these safeguards, we cannot rule out that US authorities may access such data. Where processing depends on your consent, that consent also covers the transfer under Art. 49(1)(a) GDPR. Hostinger processes data within the EU.

9. Google Analytics 4 (GA4)

This website uses Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies and similar technologies to collect information about how you use our website (page views, session duration, device, referrer). GA4 is activated only after your explicit consent (Art. 6(1)(a) GDPR; § 165(3) TKG 2021). We use IP anonymisation and have disabled personalised advertising. Data transfers to the USA are based on the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) and Standard Contractual Clauses (Art. 46(2)(c) GDPR). A Data Processing Agreement (Art. 28 GDPR) is in place with Google.

10. Google Search Console

We use Google Search Console (Google Ireland Limited) to analyse our website's visibility in Google Search. Search Console does not directly process personal data of website visitors — queries are provided in aggregated, anonymised form. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website optimisation).

11. Cookies

This website uses technically necessary cookies (legal basis: Art. 6(1)(f) GDPR) and, subject to your consent, analytics cookies via Google Analytics 4 (legal basis: Art. 6(1)(a) GDPR). You can manage, restrict, or delete cookies via your browser settings at any time.

12. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. No method of transmission over the Internet is 100% secure; absolute security cannot be guaranteed.

13. Your Rights

Under Arts. 15–22 GDPR you have the following rights regarding your personal data:

• Right of access: You may request a copy of all personal data we hold about you (Art. 15 GDPR).
• Right to rectification: You may request correction of inaccurate or incomplete data (Art. 16 GDPR).
• Right to erasure: You may request deletion of your data, subject to statutory retention obligations (Art. 17 GDPR).
• Right to restriction: You may request that we restrict processing of your data in certain circumstances (Art. 18 GDPR).
• Right to data portability: You may receive your data in a structured, machine-readable format (Art. 20 GDPR).
• Right to object: You may object to processing based on legitimate interests at any time (Art. 21 GDPR).
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time with future effect (Art. 7(3) GDPR).

To exercise your rights, please contact: contact@vexustudio.com

14. Right to Lodge a Complaint

15. Amendments to This Policy

This Privacy Policy is valid as of August 2026. Due to website developments or changes in legal requirements, it may be amended. The current version is always available on this page.

16. Contact

To exercise your rights or for any data-protection questions, please contact us at: