Legal
Privacy Policy
Last updated
This explains what Vialy collects, where it goes, how long it stays, and what you can ask us to do about it. It describes what our systems actually do, including the parts that are not yet as good as they should be.
What we collect
To produce the document we need your name, date of birth, place of birth, nationality, gender, licence number, issuing country, licence issue and expiry dates, vehicle categories, a passport-style photograph of you, a signature (drawn or generated from your typed name), and your destination countries. We also hold your email address, and any postal address or phone number you choose to give us, though those are optional and we do not post anything to you. Separately we record how you arrived at the site (referring page, campaign parameters) so we can tell which channels work.
WHY. Every field above is reproduced on the document or is needed to deliver it. We do not ask for anything we do not print or send. We never ask for your passport, your card number, or a photograph of the licence itself beyond the optional scan that only pre-fills the form in your browser.
Payment
Card details are entered on Stripe's own checkout page and never reach our servers. We receive the amount, the currency, and Stripe's identifiers for the session and payment, which is what lets us match a payment to an order and issue a refund.
Where it is stored
Order records, generated documents and uploaded photographs are stored on Vercel Blob. File paths are derived from a keyed hash and are not guessable, but they are not individually access-controlled: anyone holding the full URL to a document can open it. Treat the link in your delivery email as private.
Sharing
We share what is necessary with Stripe to take payment and with our email provider to deliver your order, and nothing else. We do not sell personal information, we do not share it for advertising, and we do not use your documents or photograph to train any model.
How long we keep it
Longer than we should. There is currently no automatic deletion in our systems: order records and the documents generated from them persist until removed by hand. We would rather tell you that than describe a retention schedule we do not run. Building one is on our list.
Your rights
Write to support@vialy.org and we will tell you what we hold about you, correct it, or delete it. One honest caveat on deletion: removing an order record does not currently remove the generated PDF or the photograph you uploaded, so ask us to delete the files too and we will do it manually. Depending on where you live you may also have the right to a copy of your data in portable form, to object to processing, or to complain to your local data protection authority.
Questions about any of this go to support@vialy.org.