Privacy Policy
Last updated: 30 September 2026
This policy explains how Veecle GmbH processes personal data when you visit veecle.ai or our documentation at docs.veecle.ai. If you use the Chiplab platform, its own privacy policy applies: https://chiplab.veecle.ai/privacy-policy
Summary
- Veecle GmbH in Berlin is responsible for the processing described here.
- We measure how veecle.ai and docs.veecle.ai are used with PostHog, without cookies and without recognising you across visits.
- If you contact us, we use your details only to reply. We send you our newsletter only if you opt in.
- We use a small number of service providers, listed in Section 6.
- You can ask us at any time to access, correct or delete your data, or object to its use: privacy@veecle.ai.
What we don't do
- We do not use advertising or tracking cookies.
- We do not sell or rent personal data.
- We do not track you across other websites.
- We do not use advertising networks.
- We do not use cookies or browser storage to recognise you when you return to our websites.
- We do not send you marketing emails without your consent.
1. Controller
Veecle GmbH
c/o EDGE, Invalidenstraße 65
10557 Berlin, Germany
Email: privacy@veecle.ai
We have not appointed a data protection officer, as we are not required to do so. For all privacy questions, contact privacy@veecle.ai.
2. Scope
This policy applies to the website veecle.ai, our documentation at docs.veecle.ai, and their subpages. The Chiplab platform at chiplab.veecle.ai is also operated by Veecle GmbH and is covered by its own privacy policy (Section 7).
3. Personal data we process
| Category | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Server logs (veecle.ai) | IP address and approximate location, browser type and version, requested page, date and time, session or device identifiers | Delivering the website, security, abuse prevention. Collected by our hosting provider Lovable (see Section 6). | Legitimate interest, Art. 6(1)(f) GDPR | Determined by Lovable |
| Website analytics (PostHog) | Pseudonymous event data: pages viewed, clicks, page performance, browser and device type, approximate location derived from IP | Understanding how the website is used and improving it | Legitimate interest, Art. 6(1)(f) GDPR | As long as needed for analysis, then deleted automatically under the retention settings of our analytics provider |
| Server-side request logging (PostHog) | Hashed IP address, requested page, user agent | Measuring all traffic to veecle.ai, including bots and AI agents that do not run scripts | Legitimate interest, Art. 6(1)(f) GDPR | As long as needed for analysis, then deleted automatically under the retention settings of our analytics provider |
| Documentation request analytics (Mintlify) | Technical request data, for example requested page, user agent and IP address | Measuring traffic from AI agents on docs.veecle.ai | Legitimate interest, Art. 6(1)(f) GDPR | As long as needed to provide the analytics, under Mintlify's retention settings |
| Contact enquiries | Name, email, company, position, industry, message | Responding to your enquiry. Messages are delivered to our team by email. | Pre-contractual measures, Art. 6(1)(b) GDPR, or legitimate interest in answering enquiries, Art. 6(1)(f) GDPR | As long as needed to handle your enquiry and any follow-up, then deleted unless statutory retention obligations apply |
| Newsletter (optional) | Name, email address | Sending you our newsletter with product updates and news, if you tick the box in the contact form | Consent, Art. 6(1)(a) GDPR | Until you unsubscribe or withdraw consent. We keep a record of your consent as long as needed to demonstrate it. |
We do not sell personal data and do not use it for advertising. You can unsubscribe from the newsletter at any time using the link in each email or by writing to privacy@veecle.ai.
4. Website analytics
We use PostHog (PostHog Inc.) to understand how visitors use veecle.ai and docs.veecle.ai. PostHog stores the data in the EU.
- PostHog on both sites is configured without cookies and without storing identifiers in your browser. Each visit is measured separately; we do not recognise you across visits.
- Requests to PostHog may be routed through our own subdomain via a proxy service operated by PostHog's subprocessors.
- For each request to veecle.ai, our server sends a log entry to PostHog containing a hashed version of the IP address, the requested page and the user agent. This lets us also measure traffic that does not run scripts, such as bots and AI agents.
Our documentation is hosted by Mintlify. Mintlify measures requests from AI agents to docs.veecle.ai on its servers. Mintlify's own visitor tracking in the browser is switched off, so it does not store identifiers on your device.
Our legitimate interest is to measure the reach of our websites and improve their content and technical performance. You can object at any time (Section 9).
5. Cookies and browser storage
We do not use advertising or tracking cookies. The following are technically necessary to operate our websites. Our hosting providers may set further technically necessary cookies of the same kind.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
__cf_bm | Cloudflare | Bot protection | Short-lived (about 30 minutes) |
__dpl | Lovable | Routes your requests to the same version of the website during a visit | Short-lived (about 24 hours) |
| localStorage | Veecle | Short submission cooldown on the contact form (veecle.ai) | Until cleared |
| sessionStorage | Veecle | Remembers the state of the page while you navigate, such as your scroll position or the last tab you opened (veecle.ai) | Until you close the tab |
| localStorage | Mintlify | Remembers interface settings (docs.veecle.ai) | Until cleared |
Storage and access that are strictly necessary to provide the service you requested are permitted under Section 25(2) no. 2 TDDDG without consent.
6. Recipients and processors
We currently use the following service providers. We update this list when our setup changes. Each processes personal data on our behalf under a data processing agreement (Art. 28 GDPR).
| Provider | Purpose | Location |
|---|---|---|
| Lovable Labs Incorporated, Boston, USA | Website hosting. Lovable uses Cloudflare, Inc. as a subprocessor for content delivery and bot protection. | USA and global network |
| PostHog Inc. | Website analytics. PostHog uses Cloudflare, Inc. as a subprocessor to route analytics requests through our subdomain. | EU; subprocessors may process data outside the EU |
| Mintlify, Inc., San Francisco, USA | Documentation hosting and request analytics for docs.veecle.ai | USA |
| Personio SE & Co. KG, Munich, Germany | Applicant management for job applications | EU |
| Resend, Inc., San Francisco, USA | Email delivery: contact form messages and newsletter | USA |
| Google Ireland Limited (Google Workspace) | Receiving and storing emails, including contact form messages | EU; transfers to the USA possible |
Our hosting provider Lovable also processes technical log data, such as IP addresses and browser information, as an independent controller for security and to operate its platform. For details, see Lovable's privacy policy: https://lovable.dev/privacy
7. Chiplab platform
When you create an account or use the Chiplab platform at chiplab.veecle.ai, the Chiplab privacy policy applies: https://chiplab.veecle.ai/privacy-policy
8. Transfers outside the EU
Some providers are based in the United States or use infrastructure outside the EU (Lovable, Mintlify, PostHog and their subprocessors such as Cloudflare, Resend, Google). Where personal data is transferred to a third country, the transfer is based on the EU-US Data Privacy Framework (Art. 45 GDPR) where the recipient is certified, or on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the applicable safeguards from us.
9. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR)
- have it corrected (Art. 16 GDPR)
- have it erased (Art. 17 GDPR)
- restrict its processing (Art. 18 GDPR)
- receive it in a portable format (Art. 20 GDPR)
- withdraw consent at any time, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Where we process your data based on legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, email privacy@veecle.ai.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin
www.datenschutz-berlin.de
10. Job applications
If you apply for a position, we process your application data to carry out the application procedure (Art. 6(1)(b) GDPR). We use Personio (Personio SE & Co. KG, Munich) to manage applications. If we do not hire you, we delete your documents once the period for claims under the General Equal Treatment Act (AGG) has expired, usually six months after the rejection. With your consent, we keep your application for up to 12 months to contact you about future openings. You can withdraw this consent at any time.
11. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
12. Security
We use technical and organisational measures to protect personal data, including encrypted transmission (TLS).
13. Changes
We update this policy when our processing changes. The current version is always available at veecle.ai/privacy.