Minimum information for a bounded service.

1. Information received

• Website requests: technical server request data ordinarily needed to deliver and protect the site.
• Fit-check email: the sender address and the business scope voluntarily included in the message.
• Stripe checkout: payment and customer information is collected by Stripe under its own privacy terms. VANTYX Labs receives the transaction information needed to confirm the purchase and operate the engagement.
• Service intake: only the authorized OpenAI and Anthropic CSV or JSON exports accepted under the written data-handling arrangement.
• Service correspondence: scope decisions, acceptance, delivery and support communications.

2. Information not requested

Do not provide API keys, passwords, production credentials, wallet data, raw prompts, customer content or unrelated personal data. Do not attach exports to the fit-check email.

3. Purposes

Information is used only as reasonably necessary to:

• deliver and protect the public website;
• answer a fit-check or service question;
• process and verify a Stripe purchase;
• agree and operate the fixed-scope engagement;
• produce and deliver the diagnostic package;
• maintain necessary service, security and financial records;
• meet applicable legal obligations.

4. Website measurement and Google Ads references

The static offer page does not require an account and does not use browser storage for the diagnostic. If a supported Google Ads click identifier is present in the landing URL, the site may pass that identifier to the Stripe checkout solely to associate a completed purchase with the campaign. The site code does not place that identifier in cookies or local storage.

Stripe is a separate service and may process information under its own terms when the checkout is opened.

5. Service providers

Information may be processed by the minimum providers required for website hosting, business email, secure transfer and payment processing. Stripe processes payment information. The exact secure transfer channel and processing location for exported files are agreed in writing before transfer.

6. Retention and deletion

No universal file-retention deadline is claimed where one has not been implemented. The exact retention and deletion arrangement for diagnostic exports is agreed in writing before transfer and recorded with the engagement.

Correspondence, transaction and legal records may need to be retained for the period reasonably required for the service, security, dispute handling and applicable law. Data is not retained merely to create unsupported marketing claims.

7. Disclosure and sale

Personal information is not sold. Information may be disclosed to the minimum service providers described above, when the customer directs it, or where required by applicable law.

8. Security and international processing

Reasonable technical and organizational controls are applied according to the agreed channel and processing location. No internet transfer or storage method can be represented as risk-free. Any location or cross-border transfer relevant to diagnostic files is identified before transfer rather than assumed on this page.

9. Privacy requests

Subject to applicable law, a person may ask about access, correction, deletion, restriction or objection regarding their personal information. Send the request to hello@vantyxlabs.pt. Do not include exported records or credentials in the request.

10. Changes

This notice may be updated when the service or applicable requirements change. The current version and update date remain published on this page.