Legal
Privacy Policy
Last updated September 24, 2026
This policy explains how Vetiu AB ("Vetiu", "we") handles personal data when you visit our website or use the Vetiu platform. For data inside a customer workspace, the customer is the controller and we act as their processor under our Data Processing Agreement.
1.Who we are
Vetiu AB, Stockholm, Sweden, org. no. [org. number], is the controller for account, billing and website data. Contact us at info@vetiu.com.
2.Data we collect
- Account data: name, work email, password (stored hashed), role and workspace membership.
- Workspace content: courses, articles, questions, quizzes and media uploaded by your organisation.
- Learning data: assignments, progress, quiz answers and scores.
- Billing data: company name, billing contact and plan details.
- Technical data: IP address, browser type and logs needed to run and secure the service.
3.How we use data and legal basis
- To provide the platform and your account (performance of a contract).
- To bill customers and meet accounting duties (legal obligation).
- To secure, maintain and improve the service (legitimate interest).
- To send service messages such as password resets (performance of a contract).
- Where required, marketing emails only with your consent, which you can withdraw at any time.
5.AI features
When you use AI features, your question and the relevant workspace content are sent to one of our approved AI providers (OpenAI, Anthropic or Google) to generate a reply. The model used can change based on quality and cost. These providers act as our subprocessors, may only use the data to produce the reply, and do not use it to train their models. See Security for details.
6.International transfers
Customer data is stored in the European Union (Ireland). Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
7.Retention
We keep workspace data for as long as the customer's subscription is active. After a workspace is closed, data is deleted within 30 days unless the law requires us to keep it longer (for example billing records).
8.Your rights (GDPR)
You can ask to access, correct, delete or export your data, restrict or object to processing, and withdraw consent. If your account belongs to a company workspace, we may forward your request to that company. You can also complain to your data protection authority (in Sweden: IMY).
Make a request on our privacy choices page or email info@vetiu.com.
9.California residents (CCPA/CPRA)
In the last 12 months we collected identifiers, professional information, internet activity and training results, for the business purposes described above.
We do not sell or share personal information for cross-context behavioural advertising, and we do not knowingly process data of anyone under 16. You have the right to know, delete and correct your data, and we will not discriminate against you for using these rights. Requests can be made via our privacy choices page or info@vetiu.com.
11.Changes
We will post updates here and notify customers of material changes.
