vintex.app
Privacy policy
Ultimo aggiornamento: 28 agosto 2026
Questa traduzione è fornita per comodità. La versione francese di questo documento costituisce il testo di riferimento.
1. Who processes your data, and how Vintex works
Data controller: Erwann DANGUY — full details in the legal notice. Contact: [email protected].
One point that governs everything else: the extension acts from your browser, within the Vinted session you opened yourself. We do not hold your Vinted password and none of our servers connects to your Vinted account. The wardrobe data that passes through our servers is therefore only what a feature genuinely requires — for example the listings and photographs you choose to back up.
The remote access feature, which allows a browser to be operated from another device, is disabled by default and is enabled machine by machine.
2. What we process, why, and on what legal basis
| Processing | Data concerned | Legal basis | Retention |
|---|---|---|---|
| Account and authentication | Email address, password (irreversible hash), language, Google identifier if you sign in with Google | Performance of the contract | Life of the account |
| Subscription and billing | Billing identity and address, VAT number, payment history | Performance of the contract, and legal obligation for accounting records | 10 years for accounting records |
| Linking your Vinted account | Vinted identifier, wardrobe username, automation settings | Performance of the contract | Life of the account, then kept detached (section 5) |
| Listing backups | Titles, descriptions, prices, categories and photographs of the items you back up | Performance of the contract | Life of the account |
| Automations | History of relisted or promoted items, timestamps | Performance of the contract | Life of the account |
| AI assistant | Item characteristics and conversation extracts submitted to the model, and its output | Performance of the contract | Life of the account |
| Activity log | Events produced by your actions and by automations | Performance of the contract | 30 days, then automatic deletion |
| Usage quotas | Consumption counters per feature | Performance of the contract | Life of the account |
| Product usage measurement | Usage events attached to a Vinted identifier | Legitimate interest: understanding real usage in order to fix and improve | As long as needed to measure usage and prevent abuse |
| Support | Discord identifier if you link your account, content of your exchanges | Performance of the contract and legitimate interest | Life of the account |
| Affiliate programme | Referral reference passed at checkout | Legitimate interest: paying our affiliates | Life of the account |
| Technical diagnostics | Error traces, from which sensitive data is stripped before transmission | Legitimate interest: detecting and fixing failures | As long as needed for diagnosis, then deleted by our provider |
| Administration and security | Log of actions carried out by an administrator on an account | Legitimate interest: traceability and fraud prevention | Life of the account |
Providing your data. The data tied to performance of the contract is necessary to create your account and use the service: without it, we cannot provide the service to you. Processing based on our legitimate interest may be objected to (section 6).
Automated decisions. The automations you enable apply the rules and thresholds you define; they produce no decision with legal effect concerning you.
3. Buyers' and third parties' data
Some features process data about people who are not our users: their Vinted username, the content of the messages they exchange with you through the inbox or the AI assistant, and order and delivery information when you manage your sales from Vintex.
This data is processed only to deliver the feature you enabled. We do not sell it, do not use it for advertising, and do not cross-reference it between users. It is deleted along with the processing it belongs to (section 5).
4. Recipients and transfers outside the European Union
We do not sell any data. We use providers who act only on our instructions:
| Provider | Role | Location |
|---|---|---|
| OVH | Hosting of the site, the API and the database | France |
| Backblaze | Storage of backup photographs | European Union |
| Cloudflare | Site delivery and protection | United States (global network) |
| Stripe | Payment, billing, subscription management | United States |
| Mailgun | Sending transactional emails | European Union |
| Sentry | Technical error diagnostics | United States |
| Anthropic | Provider of the AI models used | United States |
| Discord | Account linking and support | United States |
| Affonso | Affiliate programme tracking | Outside the European Union |
Transfers to providers established outside the European Union are framed by the safeguards provided for in Chapter V of the GDPR, in particular the European Commission's standard contractual clauses or an adequacy decision.
Your data may also be disclosed where the law requires it, at the request of a competent authority.
5. Retention and deletion
We state here only retention periods that we actually apply.
What is bounded automatically
- Activity log: deleted after 30 days.
- Deactivated account: permanently erased 30 days after the deletion request. That period lets you reactivate the account.
- Accounting records: kept for 10 years, as the law requires.
What deleting your account erases
At the end of the 30 days, the following are deleted: your account and credentials, your listing backups and the associated photographs, your automation history, exchanges handled by the AI assistant, your activity log, your extension sessions, and your customer record with our payment provider.
What remains. Some data is not attached to your Vintex account and outlives it: product usage events and the link to your Vinted account, both attached to a Vinted identifier, along with the administration action log and accounting records. You may request their erasure under the conditions of section 6.
6. Your rights and how to exercise them
You have the rights of access, rectification, erasure, objection, restriction and portability, as well as the right to withdraw your consent where processing is based on it.
The most direct route: from your account, deletion triggers the automatic erasure described in section 5.
For everything else, write to [email protected]. We reply within one month, extendable by two months where the request is complex, in which case we will tell you. We do not offer an automatic export button: a portability request is handled manually, within the same timeframe.
You may lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with the supervisory authority of your country of residence.
7. Cookies and trackers
The service uses cookies that are strictly necessary for it to work: keeping you signed in, and remembering your theme preference. These do not require your consent.
The website also loads Google Tag Manager and the Meta pixel, for audience measurement and to measure our campaigns, as well as an affiliate tracker during a referred sign-up. You can object to these from your browser settings or by using a blocking extension. A consent mechanism is being put in place.
8. Changes to this policy
The date of last update appears at the top of the page; any substantial change will be notified to you before it takes effect.