What we keep, and for how long.

01When this takes effect

This notice takes effect on 6 October 2026 and is the version in force from that date. It replaces anything published here before it. Where a date matters for a request you have already sent us, the version that was live on the day you sent it is the one that governs it, and we will tell you which that was if you ask.

02Who operates this site

Ve Bex, trading at ve-bex.click, operates this website and decides what happens to the data described here. The postal address is 167 Mill Street, Office 12, Austin, Texas 31098, Austin, Texas, United States. The phone number is +1 (925) 555-2231 and the email address is [email protected]. There is no separate data protection officer; inquiries go to the same inbox and are handled by the people named on the about page.

03What this site actually records

Four streams, and nothing beyond them.

The inquiry form

When you send the form on the contact page, the configurator or the data request page, the handler at tudue0e.php writes: your name, your phone number, your email address, the company and city line, the kind of inquiry, your message, the requested specification and the fact that you ticked the consent box. Phone and email are both optional on their own; one of them has to be there or we cannot reply.

What arrives with it

Automatically, alongside that submission: the IP address the request came from, the browser's user-agent string, the referring URL, the moment the form was rendered and the moment it was sent. The last two exist so that a submission filled in by a script within a second of loading can be discarded.

The support chat

The widget at cusa2b4.php keeps the conversation you have with us and a token stored in your browser so you can come back to the same thread. If you type a name, phone number or email into the chat, that is stored with the transcript.

Your consent choice and ad identifiers

The choice you make on the cookie bar is stored in your browser under site_consent_v2, and nothing else on this site persists a choice. If you arrived from a paid ad, the link carried a click identifier in its query string, described in the advertising clause below.

There is no account, no password, no payment and no card data. Nothing is sold on this site and no payment is taken.

04What each category is used for

• Your name and contact details are used to answer you and to write the proposal you asked for.
• Your message and requested specification are used to size the deployment: licence tier, bandwidth, storage, dial-in minutes.
• IP address, user-agent and the two timestamps are used to stop automated submissions and to work out what went wrong when a form fails.
• Chat transcripts are used to continue a conversation and to settle a dispute about what support said.
• Click identifiers and the consent signals are used to measure whether an advertising campaign produced an inquiry, and only after you allow storage.
• Server logs are used for security and for keeping the service running.

We do not build profiles of visitors, we do not run automated decision-making, and we do not use any of this to score or rank you.

05The legal basis for each use

For visitors reached by the GDPR, these are the bases we rely on, named one by one:

• Consent (Article 6(1)(a)) for storing and reading advertising and analytics identifiers in your browser, and for the consent tick that lets us keep your inquiry on file in order to reply.
• Performance of a contract, and steps taken before entering one (Article 6(1)(b)) for answering an inquiry, producing a proposal and running a rollout once you are a customer.
• Legitimate interest (Article 6(1)(f)) for the technical record that defends this site against automated abuse, and for keeping a copy of correspondence in case a proposal is later disputed. Our interest in a working, unspammed site is balanced against the fact that the data is a log line, held 30 days.
• Legal obligation (Article 6(1)(c)) where tax or accounting law requires us to keep a record of a commercial exchange.

Where consent is the basis, you may withdraw it at any time and the withdrawal does not affect what was lawful before it.

06Advertising platforms and click identifiers

This site is advertised. Paid clicks arrive here today from Google Ads and from Microsoft Advertising, and campaigns run on Meta Ads send traffic here as well. Each of those platforms appends its own click identifier to the link you followed, which is how a click can later be matched to an inquiry:

• gclid — Google Ads.
• msclkid — Microsoft Advertising.
• fbclid — Meta Ads.

The identifier sits in the address bar as part of the URL whether or not you allow storage. What changes with your choice is whether it may be written into browser storage and sent onward for measurement. Until you allow storage it is not persisted and not shared, and the ad platform receives only a consent-less signal with no identifiers attached to it. Nothing on this page, and nothing anywhere on this site, claims that Google, Microsoft or Meta has reviewed, approved or verified Vebex.

07Consent Mode v2

Consent Mode v2 runs on this site. Before anything measures anything, the four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. They stay denied while the cookie bar is on screen and while you ignore it.

Press Allow and all four are updated to granted for this browser. Press Decline, or reopen the bar from the footer and decline after previously allowing, and all four are set back to denied immediately. Alongside those signals we run with ads data redaction on and URL passthrough on, so that measurement without consent carries no identifiers and a declined visit still works normally. Your choice is kept in site_consent_v2 in your own browser for 6 months; clearing your browser storage clears it, and the bar asks again.

08Who else receives this data

Named, one by one:

• Google Ireland Ltd / Google LLC — Google Ads, which attaches gclid to a click and receives the Consent Mode signals described above.
• Microsoft Ireland Operations Ltd — Microsoft Advertising, which attaches msclkid. Its own handling of that data is covered by the Microsoft privacy statement at privacy.microsoft.com/privacystatement .
• Meta Platforms Ireland Ltd — Meta Ads, which attaches fbclid, where a campaign runs there.
• The hosting provider that serves this site and stores the inquiry database on our behalf.
• The mail provider that carries the notification of your inquiry to the operator's inbox.

The hosting and mail providers act on our instructions under a written processing agreement. We do not sell your data, and we do not hand it to data brokers, lead resellers or anyone else not on this list.

09Transfers outside the country of collection

Vebex is in the United States and the inquiry database sits there. If you write to us from the European Economic Area or the United Kingdom, your data crosses to the United States when it reaches us. That transfer rests on the European Commission's Standard Contractual Clauses with our providers, together with the EU–US Data Privacy Framework where the recipient is certified under it. The ad platforms named above operate their own international transfer arrangements, set out in their respective notices, including the Microsoft privacy statement linked in the previous clause. If you would like a copy of the clauses that cover a specific provider, ask and we will send what we are permitted to send.

10How long each category is kept

Where tax or accounting law requires a longer record of an actual commercial transaction, that narrower record is kept for the period the law sets and nothing else is kept with it. We do not hold anything "as long as necessary" and leave it at that.

11How it is protected

The site is served over HTTPS and the inquiry database is not reachable from the public web. Access to it is limited to the handful of Vebex staff who answer inquiries, over accounts with individual credentials rather than a shared login, and every administrative change is written to an audit log. Backups are encrypted at rest. Incoming submissions are rate-limited and screened by the two unlabelled honeypot fields and the render-to-send timing described above, which is how most automated junk is dropped before it ever reaches a person. If a breach affects your data and the law requires us to tell you, we write to the address we hold for you.

12Your rights under the GDPR

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the following rights over the data described here, and we honour them for every visitor regardless of where they write from:

• Access — a copy of what we hold about you and an explanation of where it came from.
• Rectification — correction of anything inaccurate, including a mistyped phone number on an old inquiry.
• Erasure — deletion, where we have no overriding legal reason to keep it.
• Restriction — a freeze on further processing while a dispute about accuracy or legitimate interest is settled.
• Portability — the data you gave us, handed back in a structured, machine-readable file.
• Objection — an objection to processing based on legitimate interest, including any use for direct marketing, which we stop on request.
• Withdrawal of consent — at any time, through the cookie bar for storage signals or by email for the inquiry consent tick.

13Your rights under US state privacy law

Vebex is based in Texas and US state privacy law applies to this site. If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information is collected and for what purpose, the right to a copy of it, the right to have it deleted, the right to correct it, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising any of them. The equivalent rights in Texas, Colorado, Connecticut, Virginia, Utah and the other states with laws now in force are honoured on the same terms.

We do not sell personal information for money. Allowing the advertising storage signals described above can count as "sharing" for cross-context behavioural advertising under the CCPA, so you have the right to opt out of it: decline on the cookie bar, or reopen it from the footer at any time and decline there. That choice is applied immediately and the four Consent Mode signals go back to denied.

14Global Privacy Control

Global Privacy Control is honoured here. When your browser or extension sends the Sec-GPC header, or exposes the signal to the page, this site treats it as a valid opt-out of sale and sharing: the four Consent Mode signals stay denied, the cookie bar does not appear asking you again, and no advertising identifier is written to your browser. You can still open the bar from the footer and allow storage deliberately if you want to; the GPC signal is never overridden without you doing that.

15Children

This is a site for businesses buying meeting software. It is not directed at children, we do not knowingly take data from anyone under 16, and there is nothing here for a child to sign up to. If you believe a child has sent us something through the form or the chat, write to [email protected] and we will delete it without asking for anything beyond what is needed to find the record.

16Complaining about how we handled it

Tell us first if you can, because most of what goes wrong is a record we can correct the same day. You do not have to. You may complain to the Attorney General of your own state, and if you are in California to the California Privacy Protection Agency. A visitor in the European Economic Area or the United Kingdom may complain to the supervisory authority of their country of residence or place of work. Going to a regulator does not cost you the right to go to court, and this notice does not ask you to waive anything.

17How to exercise these rights

Use the data request page, or write to [email protected], or post a letter to Ve Bex, 167 Mill Street, Office 12, Austin, Texas 31098, United States. Say which right you are exercising and give us something that lets us find your record: the email address or phone number you used, or the ticket number from the confirmation page.

A data request is answered within 7 days. There is no fee. We ask for proof of identity only where the request is for a copy or a deletion and the details you give do not match a record on their own, and in that case we ask for the least we can get away with. An authorised agent may act for you if they send written authority with the request.

18When this notice changes

Any change is published on this page with a new date at the top of the at-a-glance panel, and the previous version is kept so we can tell you what applied when. If a change affects what we do with data we already hold — a new recipient, a longer retention period, a new purpose — we email everyone with an open inquiry on file before it takes effect, and where consent is the basis we ask again rather than assume the old tick covers the new thing. Cosmetic edits and corrections are made without notice.

19Reaching a person about this

Email [email protected] or call +1 (925) 555-2231. Both reach the Austin office, Monday to Friday during support hours, and both are read by the same people who answer the support chat. The postal address for anything formal is Ve Bex, 167 Mill Street, Office 12, Austin, Texas 31098, United States. This notice, and any dispute about it, is governed by the law of Texas, United States, with disputes heard in the courts of Austin.