Vandall®'s Commitment to Your Privacy and Security
- Your data is handled with care. We use encrypted connections and appropriate technical safeguards for the services we operate.
- Your files, metadata, and conversations are intended for you and the collaborators you choose. Our team does not routinely review individual materials unless needed for support, security, legal compliance, or to provide the Service.
- Built for professionals, by professionals. We are an independent company operating from Finland and Estonia and focused on helping creators collaborate without turning their work into ad inventory.
At Vandall OÜ (the “Provider”), we are committed to treating our users' personal data with care and respect in relation to your use of the Vandall platform (“Vandall”) and all services provided on Vandall (collectively the “Service”).
No AI training
Statement signatory
Your work never trains AI
We've signed the Statement on AI Training. Your audio, lyrics, and splits are yours. Never used to train AI, ours or anyone else's, and never sold or shared. Your project stays your project.
Your Personal Rights and Controls
Privacy laws, including the EU General Data Protection Regulation (“EU GDPR”), give individuals rights over their personal data and regulate the collecting and processing of personal data. The Provider is responsible for collecting and processing personal data and deciding the purposes and means for which personal data is processed.
Personal data is any information that directly or indirectly identifies a natural living person, such as a name and address, but may also include account details, device data, usage data, and other information uploaded to the Service.
European Union General Data Protection Regulation
If you are an EU resident and would like to request that your data be securely removed from our systems, please send an email with enough information for us to verify your request to hello@vandall.com. We will remove relevant data so long as that removal is technically feasible, does not impact our legitimate accounting or business practices, does not impede the rights of our other users, and does not violate applicable legal standards with which we must comply.
1. Information Collection
The Provider collects and processes the following data about you, your representatives, and authorized users of the Service.
1.1 Website Visitors
- Basic request data such as IP address, browser, device, referrer, and page views.
- Necessary storage used to remember your cookie and consent choices.
- Optional analytics and experiment persistence only after you explicitly opt in.
1.2 Register
When creating a user account, you may be required to provide information such as name, surname, email, and an optional profile picture. The Provider may store this information for service personalization, account administration, and functionality.
1.3 Use of the Service
When using the Service, certain data may be collected automatically or as part of the product features, including:
- Email for authentication and personalization.
- Name and profile picture for user recognition and collaboration.
- IP address for security, diagnostics, and bug tracking via Sentry or similar tools.
- Device unique identifiers for push notifications, authentication, and service functionality.
- Rough location for analytics and product improvement.
- User-generated content, including audio, files, images, metadata, and collaboration records necessary for product features.
1.4 Contact, Support, and Marketing Requests
- When you contact us or submit a support request, we collect the information you provide so we can respond and resolve your request.
- Our newsletter and lead-capture forms require an explicit marketing opt-in. We never add you to a marketing list without it.
- For opt-in marketing flows, we may record the consent timestamp, source page, consent source, and the versions of the legal terms shown at the time of signup.
- Contacting us does not by itself subscribe you to marketing messages.
2. Use of Information
We use the information we collect to:
- Provide, maintain, secure, and improve our services.
- Process transactions and send related information, including confirmations and invoices.
- Send you technical notices, updates, security alerts, service messages, and support responses.
- Monitor and analyze trends, usage, and activities in connection with our services.
- Personalize and improve the app and website experience.
- Run optional analytics and experiments only where you have given consent.
- Send marketing communications only where you have separately opted in.
3. Sharing of Information
We may share data with trusted third parties where needed to run the Service, support our users, or meet legal obligations:
- Cloudflare for marketing-website hosting and edge delivery; Fly.io for the business dashboard; and DigitalOcean for application hosting.
- PostHog for optional website analytics and experimentation after consent.
- Brevo for opt-in marketing subscriptions, transactional email, and related contact management. (Brevo replaced HubSpot as our CRM and email provider in early 2026.)
- Firebase for login, analytics, crash reporting, notifications, and related app functionality where applicable.
- Sentry for bug tracking and monitoring.
- Internal support and operations systems used to respond to inquiries and support tickets.
We do not sell personal data to third parties. Data is stored and processed in compliance with GDPR and other applicable privacy laws.
3.1 Compliance with Laws
We may disclose collected information to comply with applicable laws, regulations, legal processes, or government requests, or to protect the rights, safety, and security of Vandall, our users, or the public.
3.2 No AI Training on User Data
Vandall has signed the Statement on AI Training. We commit not to use any user, customer, or contributor data, including audio files, project metadata, comments, agreements, and other content uploaded to or generated within the Service, to train artificial-intelligence or machine-learning models. This commitment applies globally, regardless of where the user is located or where the data is processed, and applies whether we operate the model ourselves or contract a third-party provider.
Where Vandall integrates AI-assisted features (e.g., recommendation, transcription, automation), we use providers under contractual terms that prohibit them from training their models on data we submit. We do not sell or share user data for model-training purposes.
For transparency: today, Vandall does not have routine technical access to the audio content stored by users on the Service. This pledge is intentional, even if our access model changes in the future, the no-AI-training commitment will not.
Questions about this commitment can be sent to hello@vandall.com.
4. User Rights
You may:
- Request data deletion by emailing hello@vandall.com.
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Opt out of marketing communications at any time.
- Withdraw consent for analytics or marketing storage through the site’s cookie preferences.
5. Data Retention
We retain your personal data only as long as necessary to provide the Service, maintain security, respond to inquiries, operate the business, and satisfy legitimate legal, accounting, or contractual requirements. Consent records may be retained to demonstrate when and how consent was given or withdrawn.
6. Security Measures
We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. No system is perfectly secure, but we work to reduce risk and monitor our services for security and reliability issues.
7. Cookies and Consent
The public website now uses necessary cookies and similar storage to remember your consent settings and keep the website functioning correctly. Optional analytics and experiment persistence stay off until you explicitly opt in.
For details, please review our Cookie Policy.
8. Changes to This Policy
We may update this policy periodically. Any material changes will be communicated through our platform, via email, or by updating this page with a new effective date.
Current legal versions: privacy 2026-05-20, terms 2026-05-20, cookies 2026-05-20.
9. Contact
For privacy-related inquiries, contact us at hello@vandall.com.
Vandall OÜ, Harju maakond, Tallinn, Mustamäe linnaosa, Laki tn 24/2, 12915, Estonia