This Privacy Policy explains how Vemlio collects, uses and shares personal information, and describes the privacy rights of US residents.
Scope and roles
For account and marketing data, Vemlio acts as a "business" (controller). For resident and portfolio data uploaded by a customer, the customer is the business/controller and Vemlio acts as a "service provider" (processor), processing that data only on the customer's documented instructions to provide the service.
Information we collect
Account data (name, email, role, workspace); workspace data you enter or import (properties, units, residents, leases, renewal cases, tasks); uploaded documents; communications and support requests; billing information (processed by Stripe); email delivery logs and survey responses where enabled; and technical data such as device, log and usage information and cookies.
How we use information
To provide and secure the service; to generate audit trails (Vemlio Proof); to perform AI-assisted extraction of lease terms; to send notifications, digests and transactional email; to process billing; to prevent fraud and abuse; to comply with law; and, where permitted, to improve the service and communicate with you.
How we share information
We share information with service providers and sub-processors that help us run Vemlio, including Stripe (payments), Resend (transactional email), our AI extraction provider, and object storage/hosting infrastructure. We may disclose information to comply with law or protect rights, or in connection with a business transfer. We require service providers to protect the information and use it only for our instructed purposes.
We do not sell or share your personal information
Vemlio does not sell your personal information and does not "share" it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We do not use sensitive personal information for purposes requiring a right to limit.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know and access the personal information we collect, to request deletion, to request correction, to opt out of any sale or sharing (which we do not do), and to not be discriminated against for exercising these rights. You may submit a request via privacy@vemlio.com; we will verify your identity before responding. An authorized agent may submit a request on your behalf.
Other US state privacy rights
Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas and others) have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising, sale, or certain profiling. Contact privacy@vemlio.com to exercise these rights, and you may appeal a decision by replying to our response.
Resident surveys
Participation in resident surveys is voluntary. Any incentive is tied to participation only — never to answers or to a renewal decision. Aggregated modes suppress results below a minimum response count to protect individual privacy.
Data retention
We retain personal information while your workspace is active and as configured by the customer's retention classes, then delete or de-identify it within a reasonable period, subject to legal, accounting and security obligations.
Security
We use administrative, technical and organizational safeguards, including logical tenant isolation for paid workspaces. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
International data transfers
Vemlio is operated from Germany. If you access the service from the US, your information may be processed in the EU/EEA and other countries. We rely on appropriate safeguards for such transfers where required.
Children
The service is not directed to individuals under 18, and we do not knowingly collect their personal information.
Changes and contact
We may update this policy and will post the revised version with a new effective date. For privacy requests or questions, contact privacy@vemlio.com.
We Value Your Privacy