Privacy Policy

Virtus Nemeton Ltd (“we”, “us”) builds UK-sovereign AI and data infrastructure. This policy covers virtusnemeton.co.uk, including the Solutions checkout and workspace.

Company number 17181232, registered in England and Wales. Registered office: 24 Dymchurch Avenue, Radcliffe, Manchester, England, M26 1BB. ICO registration reference: ZC161313. Contact team@virtusnemeton.co.uk for any data protection query.

Account and sign-in. Your email address, to send a passwordless sign-in link and identify your account. We do not require or store a password.

Workspace content. If you subscribe to a solution, the organisation name you provide, and whatever documents, enquiries, or service issues you or your team submit into that workspace — this is the operational data the product exists to work with, and it stays scoped to your organisation's workspace under access controls you and your team members hold.

Payment. If you subscribe, your payment is handled entirely by Stripe. We receive and store your name/email as provided to Stripe, a Stripe customer ID, and subscription status — never your card details, which never touch our servers.

Usage analytics. Aggregate, cookieless page-view and performance analytics via Vercel Analytics and Speed Insights — no individual tracking profile is built from this.

Account and workspace data: performance of a contract (providing the service you signed up for). Analytics: our legitimate interest in understanding and improving the site, balanced against your privacy — no advertising or cross-site tracking is involved.

We use the following processors, each under their own data processing terms:

• Supabase — authentication and application database (EU/UK region).
• Stripe — payment processing.
• Vercel — hosting, and cookieless analytics.

We do not sell personal data, and we do not share it for advertising purposes.

Our primary database is hosted in the UK. Stripe and Vercel operate global infrastructure and may process data outside the UK/EEA under their own standard contractual safeguards. [to confirm] — verify current sub-processor regions before publishing this as final.

Account and workspace data for as long as your subscription is active, plus a reasonable period afterward for accounting and legal purposes. You can ask us to delete your account and associated workspace data at any time, subject to what we're required to retain by law (e.g. payment records).

Under UK GDPR you can ask to access, correct, delete, restrict, or export your personal data, and you can object to processing based on legitimate interest. Contact team@virtusnemeton.co.uk to exercise any of these. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

We don't use advertising or cross-site tracking cookies. Signing in sets one strictly-necessary session cookie so you stay signed in — this is required for the workspace to function and isn't something you can opt out of while staying signed in. Vercel Analytics does not use cookies.

We'll update the date at the top of this page when this policy changes.