Privacy policy
Veset ("we", “us”, “our”) is committed to protecting and respecting your privacy.
This privacy policy (“Privacy Policy”) and any other documents referred to herein, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. This Privacy Policy applies to veset.tv, cloud.veset.tv, accounts.veset.tv, mcp.veset.tv and any other website that links to this Privacy Policy (“Site(s)”). By using the Site you are accepting and consenting to the practices described in this Privacy Policy.
Data controller
For the purposes of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”) and the laws of Latvia relating to the processing of personal data (together “Data Protection Laws”), the data controller is Veset SIA, Klīveru iela 3, Rīga, Latvija, LV-1048. Veset has not appointed a data protection officer (DPO). You can contact us about your personal data as set out at the end of this Privacy Policy.
Legal basis for processing
We collect and use the personal data described below in order to provide you with access to our Site and Services in a reliable and secure manner. We also collect and use personal data:
- For our legitimate business needs.
- To fulfil our contractual obligations to you.
- To comply with our legal obligations.
To the extent we process your personal data for any other purposes, we ask for your consent in advance or require that our partners obtain such consent.
Information we may collect from you
We may collect and process the following information about you:
- Information you give us: You may give us the following information when you fill in forms on our Sites or correspond with us by phone, email, business communication platforms or otherwise. This includes information you provide when you register to use our Sites, apps, subscribe to our services (“Services”) or newsletter, search for a product, place an order on our Sites, provide feedback, take part in a promotion or survey, and when you report a problem with our Sites or Services.
- Account Registration: We may use your name, address, phone number, and email address to register your account for the Services and to communicate important information to you. We may also obtain additional information about you, such as address change information, from commercially available sources, to keep our records current. If you set up an administrator or other privileges access account that may be accessed by people other than you, please note that they may see and have the ability to change or delete your information.
- Interest in Services: If you have an interest in obtaining information about our Services; request customer support; contact us; register to use our Site or Services; sign up for an event, webinar or contest; or download content, we may require you to provide your contact information (your name, job title, company name and address, phone number, email address or username and password).
- The veset.tv contact form: When you send the contact form, we receive your name, work email, company, job title (if you give it), the topic and your message. The message is emailed to our sales or engineering team and posted to our internal Slack. If you tick "Send me Veset product news", your contact details are added to our Mailchimp list. To limit spam, we keep a hashed form of your IP address for a short time to count how many messages are sent, and a log of each submission for 90 days; the log of a delivered message doesn't include its text.
- Purchases: If you request a subscription for our Services we may require you to provide financial and invoicing information, such as your name and address, bank account information and your company registration details.
- Surveys: If you voluntarily submit certain information to our Services, such as filling out a survey about your experience or provide any feedback, we may collect the information you have provided.
- Information we collect about you. If you interact with our websites, emails or other business or private communication platforms, we automatically collect information about your device and your usage of our websites or emails (such as Internet Protocol (IP) addresses or other identifiers, which may qualify as Personal Data; With regard to each of your visits to our Site we may automatically collect the following information using common information-gathering tools, such as cookies, web beacons, pixels, and similar technologies about your device, and your use of our Sites and Services.
- Technical information: including the Internet protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
- Information about your visit: including the full Uniform Resource Locators (URL) clickstream to, through and from our Site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our customer service number.
- Information from other online accounts: where you have given us permission to collect data from within your settings or the privacy policies of these other online services: For example, this can be via social media or by choosing to send us your location data when accessing our Site from your smartphone; or it can be from the integrations and connections that you choose to install when using the Services.
Information we receive from other sources
- Information from our other websites or services: We may receive information about you if you use any of the other websites we operate or the other services we provide. In this case we will have informed you when we collected that data that it may be shared internally and combined with data collected on this Site.
- Information we collect from other sources: We also collect information about you from publicly available sources. We may combine this information with Personal Data provided by you. This helps us keep our records up to date, identify new customers and verify contact information.
The personal data we collect includes:
- Publicly available information about you; such as information published about you in company registers. Such information may include postal address, job title, email address, phone number, professional or employment-related information, education information and commercial information.
- Internet activities: internet data (or user behavioural data), IP addresses, internet activity information and inferences about your preferences and behaviour.
- Social media profiles: information published about you on social media profiles such as LinkedIn.
- Information collected by third parties. We work closely with third parties (including, for example, business partners, sub-contractors in technical, payment and delivery services, analytics providers and search information providers) and may receive information about you from them. In particular we use service providers:
- to collect information about customer requests (for support and development purposes.)
- to allow us to chat/communicate with customers including via emails.
- to enable email communications with you.
- to manage contacts and keep a record of communications/ interactions with customers.
- our cloud accounting system that stores emails and names of persons sent invoices by email.
Cookies
With your consent, we use cookies on veset.tv to see how visitors use the Site, so we can improve it.
What are cookies
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the Site. Cookies can be “persistent” or “session” cookies.
veset.tv sets cookies only for Google Analytics, and only after you accept analytics in the cookie banner. The Nimbus console (cloud.veset.tv) and the self-service portal (accounts.veset.tv) don't set cookies.
Which cookies we use and why
The table below explains the cookies and similar browser storage we use and why we use each of them.
| Cookie or storage | Type | Purpose | Duration |
|---|---|---|---|
Cookie choice (veset-consent-v1, browser local storage, not a cookie) |
Strictly necessary | Remembers whether you accepted or declined analytics on veset.tv, so we don't ask on every page | 12 months, then we ask again |
Google Analytics (_ga, _ga_<ID>) |
Analytics | Set only if you accept analytics on veset.tv. Distinguishes visitors and sessions so we can see which pages help visitors | Up to 2 years, or until you decline in Cookie settings |
Google Analytics on veset.tv
We use Google Analytics 4, provided by Google LLC, to understand how visitors use veset.tv. It runs only with your consent:
- Until you click Accept in the cookie banner, veset.tv loads no Google script and sets no analytics cookie. Accept and Decline carry equal weight.
- With your consent, Google Analytics collects pseudonymous identifiers stored in cookies, information about your device and browser, the pages you visit, how you reached them, and events such as sending the contact form. Advertising features stay switched off.
- Google Analytics data on veset.tv is kept for 14 months, then deleted.
- You can change your choice at any time with "Cookie settings" at the bottom of every page. Declining after you accepted stops collection and deletes the Google Analytics cookies veset.tv set.
The legal basis for Google Analytics is your consent (Article 6, 1.(a) GDPR).
Videos
Videos on veset.tv play from YouTube (youtube-nocookie.com) only after you click play. Until then, no request is sent to YouTube. Once you play a video, Google's privacy policy applies to it.
veset.tv works fully without analytics cookies. You can also set your browser to refuse cookies or to ask you before accepting a cookie from the websites you visit.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.aboutcookies.org or www.allaboutcookies.org. To opt out of being tracked by Google Analytics across all websites, visit tools.google.com/dlpage/gaoptout.
Uses made of the information
We use information held about you in the following ways.
Information you give to us. We will use this information:
- To carry out our obligations arising from any contracts entered into between you and us.
- To provide you with the information, products and services that you request from us.
- To notify you about changes to our Sites and Services.
- To ensure that content from our Sites and Services is presented in the most effective manner for you and for your computer.
- To provide you with news, special offers and general information about other goods, services and events which we offer that are similar to those that you have already purchased or enquired about, unless you have opted not to receive such information.
Information we collect about you
We will use this information:
- To administer our Sites and Services and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.
- To inform you about scheduled downtimes and new features.
- To improve our Sites and Services to ensure that content is presented in the most effective manner for you and your computer.
- To allow you to participate in interactive features of our service, when you choose to do so.
- As part of our efforts to keep our Sites and Services safe and secure.
- To make suggestions and recommendations to you and other users of our Sites or Services about our services that may interest you or them.
Information we receive from other sources. We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).
We will not sell or rent your personal data to anyone.
Disclosure of your information
Information we share with third parties. We may share your information with selected third parties including:
- Members of our group: our parent company PLAY, Inc. and its subsidiaries.
- Business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you to provide services such as IT and system administration, website design, sending email communications, hosting services, backup services, payment processing, research, development, marketing and customer support, fraud detection and prevention, performance analytics, customer care including: Google LLC and its subsidiaries, and Amazon Web Services, Inc. Full sub processors list:
| Processor | Atlassian |
|---|---|
| Purpose, Service type | Software development and management services support, issue tracking |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Contact persons: Name, email address, job title, company, country. Device identification data (IP address, browser type and version, web logs). |
| Location of data processor | Australia, USA, EU |
| Data transfer Mechanism | https://www.atlassian.com/legal/data-processing-addendum SCCs |
| Supplemental Measures | Data is encrypted at rest and in transit. See more: https://www.atlassian.com/trust/security/security-practices#encryption-of-data https://www.atlassian.com/trust/privacy/guidelines-for-law-enforcement https://www.atlassian.com/trust/privacy/how-we-handle-your-data |
| Processor | AWS (Amazon Web Services) |
|---|---|
| Purpose, Service type | Cloud services and data storage provider for Veset services. For veset.tv: website hosting, the contact form and email delivery |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Customer service users: username, email, Optional user, First name, Last name, phone number, address, Optional org, address All application data except payment details. Customer contact persons: All application data except payment details. |
| Location of data processor | USA, EU |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | AWS takes technical and contractual measures to protect data: Encryption of data in transit and at rest. Encryption keys are stored in the AWS Europe (Ireland) region. https://docs.aws.amazon.com/whitepapers/latest/navigating-gdpr-compliance/aws-data-processing-addendum-dpa.html https://aws.amazon.com/blogs/security/aws-and-eu-data-transfers-strengthened-commitments-to-protect-customer-data/ https://aws.amazon.com/blogs/security/new-standard-contractual-clauses-now-part-of-the-aws-gdpr-data-processing-addendum-for-customers/ |
| Processor | Calendly |
|---|---|
| Purpose, Service type | Meeting scheduling service, used to book meetings that Veset's sales team arranges after a contact request |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) |
| Data (PII) | Name, email address. |
| Location of data processor | EEA, UK, USA, Canada |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Encryption of data in transit and at rest. All connections from the browser to the Calendly platform are encrypted in transit using TLS SHA-256 with RSA Encryption. Calendly requires HTTPS for all services. Calendly uses HSTS to ensure browsers interact with Calendly only over HTTPS and is on the HSTS preloaded lists for both Google Chrome and Mozilla Firefox. https://calendly.com/security |
| Processor | Docusign |
|---|---|
| Purpose, Service type | Electronic document signing service |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Name, email address, job title, company, country. |
| Location of data processor | USA |
| Data transfer Mechanism | BCRs (binding corporate rules) |
| Supplemental Measures | Data is encrypted at rest and in transit. https://www.docusign.com/trust/privacy/gdpr |
| Processor | Google LLC |
|---|---|
| Purpose, Service type | Collaboration services. Website analytics on veset.tv (Google Analytics 4), only after you accept analytics |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) For Google Analytics: consent, Article 6, 1.(a) |
| Data (PII) | Contact persons: Name, email address, job title, company, country. Google Analytics: pseudonymous cookie identifiers, device and browser information, pages visited and interactions, kept for 14 months. |
| Location of data processor | EU, USA |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Encryption of data in transit and at rest for Google Cloud Platform and Google Workspace. https://cloud.google.com/terms/data-processing-terms EU Data Protection Compliance: Google Cloud International Data Transfer Mechanisms |
| Processor | HelpDocs |
|---|---|
| Purpose, Service type | Document management service |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) |
| Data (PII) | Unstructured information Contains PII. |
| Location of data processor | EU, USA |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Data is encrypted at rest and in transit. https://support.helpdocs.io/article/13xkvjme6a-is-help-docs-gdpr-compliant |
| Processor | MailChimp |
|---|---|
| Purpose, Service type | Client communication and marketing email service, including product news for people who opt in on the veset.tv contact form |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) For product news requested on the veset.tv contact form: consent, Article 6, 1.(a) |
| Data (PII) | Name, email address, job title, company, country. |
| Location of data processor | USA |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Data encrypted at rest and in transit. https://mailchimp.com/gdpr/ |
| Processor | MongoDB Atlas (cloud service) |
|---|---|
| Purpose, Service type | Database services |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Name, email address. |
| Location of data processor | USA, EU, UK |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Data encrypted at rest and in transit. https://www.mongodb.com/cloud/trust/compliance/gdpr |
| Processor | PayTraq SIA |
|---|---|
| Purpose, Service type | Online accounting and invoicing service |
| Legal basis | Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) |
| Data (PII) | Customer contact persons: Name, email address, company, address, invoice details. |
| Location of data processor | Latvia |
| Data transfer Mechanism | Agreement |
| Supplemental Measures | PayTraq acts as a data processor and doesn't process the data for its own purposes. https://paytraq.com/privacy/gdpr-en/ |
| Processor | Slack Technologies LLC |
|---|---|
| Purpose, Service type | Collaboration tools, including internal notifications of messages sent through the veset.tv contact form |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Name, email address, job title, company, country. |
| Location of data processor | USA, Ireland |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Encryption of data at rest and in transit. https://slack.com/intl/en-de/blog/news/a-note-to-our-customers-on-international-data-transfers Slack’s Security Whitepaper |
| Processor | Zoom |
|---|---|
| Purpose, Service type | Video call service |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) |
| Data (PII) | Name, email address. |
| Location of data processor | EEA, USA |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | Data encrypted at rest and in transit. https://explore.zoom.us/en/gdpr/ |
| Processor | Zapier |
|---|---|
| Purpose, Service type | Workflow automation service |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) |
| Data (PII) | Name, email address, job title, company, country. |
| Location of data processor | USA |
| Data transfer Mechanism | SCCs |
| Supplemental Measures | https://zapier.com/help/account/data-management/data-privacy-security-faqs https://zapier.com/help/account/data-management/data-privacy-at-zapier |
| Processor | ASGL |
|---|---|
| Purpose, Service type | Financial accounting Online accounting service |
| Legal basis | Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. Article 6, 1.(f) Processing is necessary for compliance with a legal obligation to which the controller is subject. Article 6, 1.(c) |
| Data (PII) | Customer contact persons: Name, email address, job title, company, country. |
| Location of data processor | Latvia |
| Data transfer Mechanism | Agreement |
| Supplemental Measures | Closed document cabinets, video surveillance, electronic keys. Safe processing of electronic information: use subprocessor Paytraq. |
- Professional advisors acting as service providers to us in relation to the Sites or Services - including lawyers, bankers, auditors, and insurers.
- Analytics and search engine providers that assist us in the improvement and optimisation of our Site and Services.
- We may share anonymous and aggregated usage data and reports in the normal course of operating our business; for example, we may share information with other Site or Services users, our customers or publicly to show trends or benchmark the general use of our Site and Services.
Information we disclose to third parties. We may disclose your personal data to third parties:
- In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
- If we or a member of our group of companies or substantially all of their assets are acquired by a third party, in which case personal data held by them about their customers will be one of the transferred assets.
- If we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms and conditions, terms of use and/or any other legal agreements; or to protect our rights, property, safety, our customers or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.
Where we store your personal data
Our Services are global and your information (including personal data) may be stored and processed in any country where we have operations or where we engage service providers, and we may transfer your information to countries outside of your country of residence, which may have data protection rules that are different from those of your country of residence.
The personal data that we collect from you may therefore be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers or partners. Such staff or subcontractors may be engaged in, among other things, the fulfilment of your order, the processing of your payment details or the provision of support services. By submitting your personal data, you agree to this transfer, storing or processing outside of the EEA.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. In particular, this means that your personal data will only be transferred to a country that provides an adequate level of protection (for example, where the European Commission has determined that a country provides an adequate level of protection) or where the recipient is bound by standard contractual clauses according to conditions provided by the European Commission (“Standard Contractual Clauses”).
Our Site and Services are accessible via the internet and may potentially be accessed by anyone around the world. Other users may access the Site or Services from outside the EEA. This means that where you chose to post your data on our Site or within the Services, it could be accessed from anywhere around the world and therefore a transfer of your data outside of the EEA may be deemed to have occurred. You consent to such transfer of your data for and by way of this purpose.
Protection of your information
All information you provide to us is stored on our secure servers. Where we have given you (or where you have chosen) a password which enables you to access certain parts of the Site or Services, you are responsible for keeping this password confidential. We ask you not to share any password with anyone.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will endeavour to protect your personal data, we cannot guarantee the security of your data transmitted to our Site or the Services. Any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
Links to other websites
Our Sites and Services may, from time to time, contain links to and from the websites of our partners and other third parties. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.
Your rights
You have the right under Data Protection Law, free of charge, to request:
- Access to your personal data.
- Rectification or deletion of your personal data.
- A restriction on the processing of your personal data.
- Object to the processing of your personal data.
- A transfer of your personal data (data portability) in a structured, machine readable and commonly used format.
- Withdraw your consent to us processing your personal data, at any time.
You can make a request in relation to any of the above rights by contacting us as set out at the end of this Privacy Policy. We will respond to such queries within 30 days and deal with requests we receive from you, in accordance with the provisions of Data Protection Law.
Marketing communications
We send you marketing emails if you “opt in” to receive them, for example by ticking "Send me Veset product news" on the veset.tv contact form or when registering on our Site. If you are a customer or have used a trial account, we may also email you about our similar services. Sending the contact form without ticking the box doesn't add you to our marketing emails.
Please note that, if you change your mind about being sent marketing emails you can “opt out” at any time by clicking the “unsubscribe” link at the bottom of any marketing email. Once you “opt out”, you will no longer receive any marketing emails from us. We will continue to communicate with you regarding your service billing and support via email.
Data retention
We retain personal data for as long as necessary for the relevant activity for which it was provided or collected. This will be for as long as we provide access to the Site or Services to you, your account with us remains open or any period set out in any relevant contract you have with us. However, we may keep some data after your account is closed or you cease using the Site or Services for the purposes set out below.
When your Nimbus account is deleted, the personal data in it is deleted with it. We don't keep customer personal data in a separate store. We may retain personal data where reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, maintain security, prevent fraud and abuse, resolve disputes, enforce our legal agreements, or to fulfil your request to “unsubscribe” from further messages from us.
Google Analytics data on veset.tv is kept for 14 months (see Cookies). Contact form submission logs are kept for 90 days.
We will retain de-personalised information after your account has been closed.
Please note: After you have closed your account or deleted information from your account, any information you have shared with others will remain visible. We do not control data that other users may have copied from the Sites or Services. Your profile may continue to be displayed in the services of others (e.g. search engine results) until they refresh their cache.
Complaints
If you have any complaints about our use of your personal data please contact us as set out at the end of this Privacy Policy, or contact your local data protection supervisory authority in the country in which you are located.
Age of users
These Sites and the Services are not intended for and shall not be used by anyone under the age of 16.
Changes to our privacy policy
Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check back frequently to see any updates or changes to our Privacy Policy.
This Privacy Policy was last updated in November 2026 and this version replaces any other Privacy Policy previously applicable from this date.
Contact
Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed by email to complaintsgdpr@veset.tv