Privacy policy

Controller

What we process

Your account email address, the documents you upload (delivery notes, weighing notes) and the movement data extracted from them (waste code, mass, partner GLN, treatment method).

Where your data is stored

On Supabase servers in Frankfurt am Main, Germany (EU).

Processors

When you invite a colleague to your company, that person receives an email containing your name and the company's name; it is sent through our email provider.

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• Anthropic (extraction of document data via API)
• Resend (sending email)
• Sentry (error logging)

Retention

Documents and the movement data extracted from them are kept for as long as your account exists. After an account is deleted they are removed from the active systems within 30 days; backups expire within a further 30 days.

Your rights

Access, rectification, erasure, restriction of processing, objection and data portability under Art. 15–21 GDPR. You have the right to lodge a complaint with the Austrian data protection authority.

Cookies

Vastum uses no tracking or marketing cookies. One technically necessary cookie stores your language preference.