Legal

Privacy Policy

Veyago travel app, veyago.app & veyago.cloud · Last updated 28 September 2026

Veyago Inc. (“Veyago”, “we”, “us”) is a small product studio in New York. We make the Veyago travel app, a travel destination discovery app, and we build websites for clients. This policy explains how we handle personal data when you use the Veyago travel app (iOS and Android), its website at veyago.app, and this studio website at veyago.cloud (together, the “Service”). The Provisum app has its own notice.

Data controller

Veyago Inc., a New York C-Corporation, 54 State Street, Ste 804 #17055, Albany, NY 12207, USA. Email hello@veyago.cloud. Phone +1 (518) 913 2531 (US callers) or +1 (943) 273 6579 (international callers).

Data protection contact

Until we appoint a formal Data Protection Officer, all privacy questions are handled directly by our CEO and founder, Cassian Drefke, at hello@veyago.cloud.

EU and UK representatives (Article 27 GDPR / UK GDPR)

Veyago Inc. has no establishment in the European Union or the United Kingdom and has not appointed an EU or UK representative. We rely on the exemption in Article 27(2)(a) of the GDPR and the UK GDPR: our processing of data about people in the EU and UK is occasional, does not involve special categories of data on a large scale, and is unlikely to put your rights and freedoms at risk. If that changes we will appoint a representative and name them here. In the meantime, contact us directly at hello@veyago.cloud. You keep the right to complain to your local supervisory authority.

The company

Veyago Inc. is a New York business corporation, incorporated April 28, 2026 (DOS ID 7899587). Registered agent for service of process in Albany, NY. Founder and CEO: Cassian Drefke.

Information we collect

We aim to collect as little as possible. Depending on how you use the Service, this may include:

• Account & contact details - such as your name and email address.
• Travel preferences & activity - destinations, searches, saved places, and lists, to personalize discovery.
• Approximate or precise location - only with your permission; you can turn it off anytime.
• Device & usage data - app version, device type and language.
• Communications - messages you send us and our replies.

We do not knowingly collect special categories of personal data, and we do not use your data for third-party advertising.

The quote form on veyago.cloud

The “Get a quote” form on our Websites and Services pages, and on their Dutch and German versions, is the one place this website asks you for personal data.

What we collect. Your name and email address. If you choose to give them, your business name, your current website, your message and the package you picked. We also record the page and language the form was sent from, and a salted hash of your IP address. The hash cannot be turned back into your address, and we use it only to limit abuse of the form.

Why. To answer your request and prepare a quote, which is a step taken at your request before a contract (Article 6(1)(b) GDPR), and to keep the form from being abused, which is our legitimate interest (Article 6(1)(f) GDPR).

Who handles it. The form posts to our own server, not to a form provider. Two processors are involved, both under contract and both in the United States: Supabase stores the enquiry in our database, and Resend delivers our notification and your acknowledgement email. A follow-up task is then created in our own back office so that a person replies to you.

How long we keep it. The hashed IP address is removed after 30 days. Enquiries we mark as lost or spam are deleted after 90 days. Every enquiry is deleted after 24 months at the latest.

Your choices. Email hello@veyago.cloud at any time and we will correct or delete your enquiry. If the form cannot reach our server it offers a pre-filled email instead, and then only your email provider and ours handle the message.

Waitlist and newsletter

Travel app waitlist. The “Join the waitlist” buttons are plain links. They open Waitlister (waitlister.me), a third-party form host, in a new tab. Waitlister collects your email address on our behalf so we can tell you when the Veyago travel app is available, and processes it as our processor. Nothing from Waitlister loads on this site.

Wallpaper newsletter. The newsletter sign-up on our wallpapers page is not connected to a mailing provider yet. Until it is, it opens your email app so you can write to us, and we add you by hand. We will update this policy when a provider is chosen.

When we audit your organization

When an organization engages us for a Microsoft 365 audit or a software spend review, we process its data on its behalf and under its instructions: the organization is the controller and Veyago Inc. is its processor. That data can include tenant settings and license records, sign-in and usage records, the names and email addresses on accounts, and, for a spend review, the invoices and tool lists the organization shares with us. We reach it only through read-only roles the organization grants and removes. We use it only to produce that organization’s report, keep it encrypted, and delete it within 30 days of delivering the report, confirming the deletion in writing on request. A data processing agreement, listing any subprocessors, is available before any work starts.

How we use your information

• To provide and operate the Service.
• To personalize recommendations and remember your preferences.
• To respond to your messages and provide support.
• To keep the Service secure and debug issues.
• To comply with legal obligations.

Legal bases (GDPR / UK GDPR)

• Contract - to deliver features you ask for.
• Consent - for optional things like precise location; withdraw anytime.
• Legitimate interests - to improve and secure the Service.
• Legal obligation - where the law requires it.

Sharing your information

We do not sell your personal data. We share it only with trusted service providers under contract - cloud hosting, mapping and place data, email delivery, and the form host named above - and only as needed. We may disclose information if required by law. None of our providers may buy your identity.

International transfers

We operate from the United States, so your data is processed in the United States, with appropriate safeguards such as Standard Contractual Clauses where applicable.

Data retention

We keep personal data only as long as needed or as required by law. When you delete your account, we delete or anonymize the associated data within a reasonable period. The retention periods for the quote form are set out above.

Your rights

Subject to your location, you may access, correct, delete, export, or restrict processing of your data, object to certain processing, and withdraw consent - email hello@veyago.cloud. EEA/UK residents may complain to a supervisory authority. California residents may exercise CCPA/CPRA rights; we do not sell or “share” personal information under California law.

Cookies & local storage

This website sets no cookies and loads nothing from third parties: no analytics, no fonts, no embeds, no trackers. It keeps four small values in your browser’s local storage and nothing else: the language you chose (“veyago.lang”), whether you last looked at the Private or the Business side of the site (“veyago.side”), whether you dismissed the language suggestion, and whether you dismissed an announcement bar. None of these leaves your device, and you can clear them in your browser settings at any time.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Security

We use reasonable technical and organizational measures to protect personal data. No method is perfectly secure, but we work to safeguard your information.

Changes to this policy

We may update this policy and will post the revised version here with a new “Last updated” date.

Contact

Questions? Email hello@veyago.cloud, or call +1 (518) 913 2531 (US callers) or +1 (943) 273 6579 (international callers).

Veyago Inc. · New York, USA