1. Controller and scope
Vexo International Limited Liability Company (“Vexo”, “we”) operates this website and is the controller of the processing described in this policy. This policy addresses the corporate website and does not describe processing within CompetitorSpy.ai or Crawlr.pro.
Address: 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Privacy enquiries and rights requests: privacy@vexo.business.
Vexo International Limited Liability Company has no establishment in the European Union or the United Kingdom. It has not appointed a data protection officer, as its core activities do not involve regular and systematic monitoring of individuals on a large scale or processing special categories of data. It has not appointed an EU or UK representative either; if applicable law requires one, their details will be listed here.
2. Data and purposes
- Language preference: the browser provides its languages to local code to select Spanish or English. A manual selection may be stored on the device for 180 days. This code does not send the preference to an external service.
- Visits: this version integrates no analytics, advertising, pixels or forms. Production hosting may generate technical logs such as IP address, time, URL and browser details to serve and protect the site.
- Email: if you write to an @vexo.business address, the message is received through Cloudflare Email Routing and forwarded to a mailbox hosted by Google (Gmail), where we process your address, the message content and any data you include in order to reply. We use Resend to send email, which processes recipients, content and delivery data to send messages. We do not enable open or click tracking. This website does not send messages from the browser.
- Optional analytics: Google Analytics measures visits and page usage through identifiers and device and interaction data, only after analytics is accepted. You can withdraw your choice through “Privacy settings”. It is not currently active on this website.
3. Legal bases, where applicable
Processing to respond to pre-contractual requests may rely on steps requested by the individual; business contacts and security may rely on properly assessed legitimate interests; and retention duties may rely on applicable law. Uses requiring consent must only be enabled after obtaining it. Consent is not used as a blanket basis for the entire site.
Google Analytics relies on your consent, which you can withdraw at any time. Emails we send to answer your enquiries or relating to a request you made rely on the pre-contractual steps you request or on our legitimate interest in handling business communications. We will only send marketing communications with your prior consent or where the law allows it, always with an easy way to unsubscribe. Protecting the website against abuse and attacks through Cloudflare relies on our legitimate interest in keeping it secure.
4. Providers, recipients and transfers
The identified providers are Cloudflare (website hosting and delivery), Resend (email delivery) and Google Analytics (usage measurement, subject to consent). Google advertising features are not enabled in this implementation. Any legally required disclosure must be limited to what is necessary.
- Cloudflare, Inc. (USA): website hosting, delivery and security, and email receipt (Email Routing). It acts as a processor under its data processing addendum, incorporated into its terms of service.
- Plus Five Five, Inc. (“Resend”, USA): email delivery, as a processor under its data processing addendum, incorporated into its terms of service.
- Google LLC (USA): email mailbox (Gmail) and, only if you accept analytics, Google Analytics, subject to its data processing terms.
Vexo is established in the United States, so data is mainly processed there; providers may process it in other countries through their subprocessors. For data from the European Economic Area or the United Kingdom, transfers rely on the EU-U.S. Data Privacy Framework and its UK Extension, in which these providers participate, and on the standard contractual clauses included in their agreements. No specific data residency has been configured.
References: Cloudflare, Resend and Google. These notices supplement, but do not replace, Vexo’s disclosures.
5. Retention
The language preference expires after 180 days and is removed when expiry is detected on a later visit; you can delete it sooner. Enquiries and technical logs should be kept only as needed for their purpose and applicable obligations.
- Google Analytics: if enabled, event-level data is retained for 2 months.
- Email enquiries: up to 24 months after the last communication, unless there is a business relationship or the law requires longer retention.
- Resend deliveries: delivery logs are kept according to our Resend account settings and deleted within 90 days if the account is closed.
- Cloudflare technical logs: kept for limited periods according to the service and Cloudflare’s policies; we have not enabled log export or additional log storage.
- Rights requests: up to 3 years, so we can demonstrate how they were handled.
- Backups: the website is static and keeps no databases or backups containing visitors’ personal data.
Cookie lifetime is not the same as server-side data retention.
6. Your rights
Depending on applicable law, you may have rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent without affecting earlier lawful processing. You may also complain to the competent data protection authority. We may request proportionate information to verify your identity.
You can exercise them by writing to privacy@vexo.business. All channels are listed on the contact page.
7. Security and automated decisions
This version implements no user profiling or automated decisions with legal effects. Hosting and email safeguards must be appropriate to risk and verified before launch. Absolute security is not guaranteed.
8. Children and sensitive data
The website is aimed at professionals. It does not request children’s information or special categories of personal data. Do not send sensitive data in general enquiries.
9. Links, updates and territorial scope
Linked websites may have their own notices. Before adding forms, payments, additional analytics features or product functionality, this policy will be updated to reflect actual processing. Applicable privacy laws must be assessed in light of the business’s activities and markets.