Privacy Notice

1. Who we are

This Privacy Notice explains how J.R. Murset Holding B.V., a private limited company incorporated in the Netherlands, trading as "Vyntree" ("we", "us"), collects, uses, shares, and protects personal data when you use vyntr.ee, www.vyntr.ee, and the Vyntree service ("Service"). For the personal data processed through the Service, J.R. Murset Holding B.V. is the data controller.

• Legal name: J.R. Murset Holding B.V.
• Trading as: Vyntree
• Privacy contact: support@vyntr.ee

2. What we collect

• Account data: name, email, username, password hash, profile photo.
• Content data: the links, text, images, and products you add to your page.
• Usage data: page views, clicks, referrers, device type, browser, approximate location derived from IP.
• Device & log data: IP address, timestamps, error logs, session identifiers.
• Support data: the content of messages you send us.
• Payment metadata: subscription status, plan, invoices. Payment card details are processed by Paddle, not stored by us.

3. Why we use it (and legal basis)

• Provide the Service — performance of contract.
• Account security & fraud prevention — legitimate interest and legal obligation.
• Customer support — performance of contract.
• Analytics to improve the product — legitimate interest.
• Product updates and marketing emails — consent (you can unsubscribe at any time).
• Compliance with legal obligations — legal obligation.

4. Who we share data with

• Subprocessors and service providers — hosting, database, email delivery, error monitoring, customer support tooling.
• Paddle — our Merchant of Record for sale of subscriptions, payment processing, subscription management, invoicing, and tax compliance.
• Professional advisers — legal, accounting, auditors, where necessary.
• Authorities — where required by law, court order, or to protect rights and safety.

We do not sell personal data.

4a. Connected social accounts (TikTok, YouTube, Twitch, Instagram, Spotify)

You can optionally connect third-party social accounts to your Vyntree page using OAuth. Connections are voluntary and you can disconnect at any time from your dashboard. We only request the minimum scopes needed to display your public profile, follower stats, and latest public posts/videos on your Vyntree page.

• TikTok: when you connect TikTok via Login Kit, we request the scopes user.info.basic, user.info.profile,user.info.stats, and video.list. We store your TikTokopen_id / union_id to link the account, and cache your avatar, display name, follower / following / likes counts, and your latest public videos for up to 24 hours so we can render them on your Vyntree page. We never post on your behalf, never access private or unlisted videos, never read DMs, and never share TikTok data with third parties. Disconnecting from your dashboard immediately stops further sync and removes cached TikTok data within 30 days. TikTok's own processing of your data is governed by TikTok's Privacy Policy.
• YouTube, Twitch, Instagram, Spotify: same principle — read-only access to public profile data and recent public content, cached for display, with disconnect available at any time.

5. International transfers

Some of our providers process data outside the EEA/UK. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions to protect your data.

6. How long we keep data

We keep personal data only as long as needed for the purposes described above: account data while your account is active and for up to 12 months after deletion; billing and tax records for the period required by law (typically 7 years); analytics and log data for up to 24 months. After these periods, data is deleted or anonymised.

7. Your rights

Subject to applicable law (including the GDPR), you have the right to:

• access your personal data and obtain a copy;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict or object to processing;
• data portability;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data protection authority.

We respond to verified requests within 1 month. To exercise your rights, email support@vyntr.ee.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, audit logging, and least-privilege access. No system is 100% secure, but we work continuously to reduce risk.

9. Cookies

We use strictly necessary cookies to keep you logged in and to remember preferences. We may use analytics cookies to understand how the Service is used; these are only set with your consent where required. You can control cookies through your browser settings.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this notice

We may update this Privacy Notice. Material changes will be communicated by email or in-app. The "Last updated" date above shows the latest revision.

12. Contact

Privacy questions: support@vyntr.ee. See also our Terms and Refund Policy.