Privacy Policy

How Vine handles personal data, in line with the EU GDPR.

1. Who is responsible

The controller for personal data processed about Vine account holders is Marcos Antonio Oliveira Ramos (Munich, Germany) — see the Imprint for full details and contact information.

For the customer records you store in Vine (your organizations, contacts and deals), you (the account holder) are the data controller and we act as your data processor. A Data Processing Agreement is available on request.

2. What we collect

Account data: your email address, name, and company/workspace name.
Billing data: subscription status and your Stripe customer ID. Card details are handled by Stripe — we never see or store them.
Content you enter: the organizations, contacts, deals, notes and tasks you add. You are responsible for having a lawful basis to store this data.
Technical data: strictly necessary cookies and standard server logs needed to run the service securely.

3. Why and on what legal basis

To provide the service — performance of a contract (Art. 6(1)(b) GDPR).
To bill subscriptions — contract and legal obligation (Art. 6(1)(b), (c)).
To keep the service secure — legitimate interest (Art. 6(1)(f)).

4. Cookies

Vine uses only strictly necessary cookies: your authentication session and a small cookie remembering your active workspace. We use no advertising or analytics cookies and do not track you across sites, so no consent banner is required.

5. Where your data is processed

Your database is hosted in the European Union (Frankfurt). Some service providers (see Sub-processors) may process data outside the EU; where they do, transfers are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

6. How long we keep it

We keep your data for as long as your account is active. When you delete your account (Settings → Danger zone), your workspace data is deleted; residual copies in encrypted backups are removed on the normal backup rotation. Billing records may be retained where required by law.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can:

Export all your workspace data from Settings at any time.
Delete your account and data from Settings → Danger zone.
Contact us at [email protected] for any request.

You also have the right to lodge a complaint with a supervisory authority (in Germany, the data protection authority of your federal state).

8. Changes

We may update this policy as the service evolves. The date below reflects the latest version.

Last updated: 2 June 2026