Legal
GDPR
What personal data VaaniCraft processes, on what basis, who it is shared with, and the rights you can exercise over it.
Last updated 25 August 2026
VaaniCraft is operated by VrittIQ, which is the data controller for the personal data described here. This page summarises how we meet the UK GDPR and EU GDPR. It sits alongside our Privacy Policy, which is the full document.
What we process, and why
| Data | Why we process it | Lawful basis |
|---|---|---|
| Name, email address, password hash | To create your account and sign you in. | Performance of a contract |
| Your strategy inputs and generated content | To produce and store the posts, ideas and replies you asked for. | Performance of a contract |
| LinkedIn profile, pages and post analytics you connect | To publish on your behalf and show you how your content performed. | Performance of a contract |
| Billing and subscription status | To take payment and give you the plan you bought. | Performance of a contract / legal obligation |
| Website analytics and advertising measurement | To understand which pages and campaigns bring people here, and which adverts lead to a sign-up. | Consent (the cookie banner) |
Your rights
Under the GDPR you can ask us to do any of the following, free of charge:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct anything that is wrong or incomplete.
- Erasure — delete your account and the personal data attached to it.
- Restriction — pause our processing while a dispute is resolved.
- Portability — receive your data in a machine-readable format, or have it sent to another provider.
- Objection — object to processing we carry out on the basis of legitimate interests, including analytics.
- Withdraw consent — where we relied on consent, withdraw it at any time without affecting what came before.
How to exercise them
Email vaanicraft@vrittiq.co.uk from the address on your account and tell us which right you want to exercise. We will respond within one month, as the GDPR requires, and will tell you if we need longer for a complex request.
Who else processes your data
We use a small number of sub-processors to run the service. Each is bound by its own data processing terms:
| Sub-processor | What it does for us |
|---|---|
| Microsoft Azure | Hosting, database and application logging. |
| Google (Gemini) | Generates the drafts, ideas and replies you request. |
| Google Analytics & Google Ads | Website traffic measurement and advertising performance on vaanicraft.io — only after you accept cookies. |
| Stripe | Payment processing and subscription billing. |
| Publishing your posts and returning the analytics for them, once you connect your account. |
International transfers
Some of these providers process data outside the UK and EEA. Where they do, the transfer relies on the safeguards in that provider's data processing agreement — standard contractual clauses and the UK addendum.
Keeping data no longer than needed
- Account and content data is kept while your account is open.
- Delete your account and we remove the personal data attached to it, apart from records we are legally required to keep — billing records, for example.
- Backups roll off on their own schedule, so a deletion can take a short time to disappear from every copy.
Complaints
If you are not happy with how we have handled your data, tell us first at vaanicraft@vrittiq.co.uk — we would rather fix it. You also have the right to complain to your data protection regulator; in the UK that is the Information Commissioner's Office (ico.org.uk).
This page sits alongside our Privacy Policy and Terms of Service. If those documents and this page ever disagree, the Privacy Policy and Terms take precedence.