Data and privacy

Who holds the data

Vefaro. Everything lives on our own server in Germany — not on rented capacity inside someone else’s product.

For your own account data we are the controller. For the conversations of people visiting your website, you are the controller and we act as your processor: we hold and process them on your instructions so your bot can work.

What we hold

• Account: name, email, password hash, dashboard language, plan and payment history.
• Your sites: the address, the public page text we read, and the knowledge base built from it.
• Conversations: the messages between your visitors and the bot, with time and language.
• Leads: whatever the visitor chose to give — usually a name and a phone number, sometimes an address or a preferred time.
• Technical: IP address and browser signature, used for rate limits and abuse protection.

Who else sees it

To produce an answer, the text of the conversation and the relevant part of your knowledge base is sent to our language model provider, DeepSeek. They process it to return an answer.

Payments go through lava.top. They receive your email and the amount; we receive only the fact of payment.

If you connect Telegram, your leads are also delivered there — that is your own channel and your own choice.

Nobody else. We do not sell data, we do not share it with advertisers, and we do not use it to train models.

How long we keep it

Account and site data: while your account exists, and 30 days after you ask for deletion, so an accidental deletion can be undone.

Conversations and leads: while your account exists. You can delete a site at any time, which removes its bot, conversations and leads immediately.

Payment records: as long as tax law requires us to keep them.

Your rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. You can object to processing and ask us to restrict it. Write to info@vefaro.com and we answer within 30 days.

If you are in the EU or the UK and you are not satisfied with our answer, you may complain to your national data protection authority.

Cookies

We use two. One keeps you signed in to the dashboard. One remembers which partner sent you, if you arrived through a partner link, for 90 days.

We run no advertising trackers and no third-party analytics on this site.

What visitors to your site should know

The widget stores the conversation so you can read it later. It sets no tracking cookie and it identifies nobody by name unless the visitor types their name in.

If your own privacy policy needs to mention us, this is the wording: conversations with the site chat are processed by Vefaro on servers in Germany, and a copy of the message text is sent to DeepSeek to generate the reply.