Vemly privacy policy (version 2026-10-12.1)
1. Who is responsible for your data
Arthur Dimeglio, entrepreneur individuel (EI), operating the Vemly platform.
Address: 41 route du Cap, 83230 Bormes-les-Mimosas, France.
For any question or request: contact@vemly.ai.
2. The data we receive
Your account: name, email, phone. Your password is stored in encrypted form; we cannot read it.
Your application and your developer profile: links to your work, description, skills, photo.
Your activity on the platform: projects, offers, and messages exchanged on the site.
Photos, files and voice notes you send in a conversation with another member are stored on our servers. Only you and that member can open them. If a message is reported, Vemly's team can open the attachments of that message and of the messages around it.
Your agreements and contracts: the name you type to sign, the date, and a fingerprint of the signed text.
Messages sent through the contact form.
Technical data: the IP address, used briefly to limit abuse of the forms, and a few cookies described below.
If you use the mobile app and allow notifications: an identifier of your phone used only to send you these notifications. It is removed when you switch notifications off, log out or delete your account.
If you choose a photo or a picture in the mobile app, only the one you choose is sent. The app does not read your photo library, your contacts or your location.
3. Signing in with Google, GitHub or Apple
If you sign in with Google or GitHub, we receive from that service your name, your email address and the address of your profile picture. We do not receive your password, and we publish nothing on your Google or GitHub account.
If you sign in with Apple, we receive the name and the email address you choose to share with us; Apple may give us a relay address instead of your own.
The name we receive is offered as your display name; you can change it before you confirm.
4. What is public
Your profile (name, photo, headline, description, skills, links, level and badges) is public when the "public profile" switch is on. You can turn it off in your console.
When you open a member's public profile while signed in, Vemly records that you viewed it: your account, that member, and the day. That member can see how many people viewed their profile; with a Pro subscription they can also see who: your name and photo, or your company's name if you use a company account, and the day. Visitors who are not signed in are not recorded. You can turn this off with "Browse profiles privately" in your profile settings: your visits are then not recorded, those already recorded are deleted, and you do not see who viewed your profile.
The links you publish in the Library and what you publish in the community areas are public, with your display name. The launches you publish and the pictures you add to them are public too: only upload pictures you have the right to show. Your email and phone are never shown.
Teams: a team's public page (name, logo, description, tags and the members whose profile is public) is visible to everyone. A team's private space (feed, shared items, applications) is visible only to that team's members; Vemly staff can access this content when needed for moderation, security and legal reasons.
Your votes and your reports are not shown to other members; reports are read by the Vemly team.
5. Businesses we write to
We send emails to businesses to present Vemly. We use public business contact details: the company's website and the open map OpenStreetMap.
We write to the same address at most twice. Reply "stop" and we will not write to you again.
6. Why we use it
To create your account and run the marketplace: this is the service you ask for.
To protect the site against abuse and to present Vemly to businesses: this is our legitimate interest. You can object to it.
To meet our legal duties, for example keeping a signed contract.
7. Who can see it
Other users see what your profile, your projects and your offers show. A developer's profile may be public. Your email and your phone are never shown to other users. A member whose profile you opened while signed in may see that you viewed it (see "What is public").
In a conversation with another member, the other person can see when you have read their messages ("Seen") and when you are typing. Only the fact that you are typing is sent, never what you type.
An open project is listed publicly on the website and in the app: its title, description, type, budget, deadline and country, without the company's name. On a project, the company's name is shown only to developers selected by Vemly. Separately, companies registered on Vemly are listed by name in a directory that members with a Pro subscription can read, and those members can send a company a message.
Our technical providers, only to run the service: Supabase (database and sign-in), Vercel (website hosting) and Resend (sending emails). For the mobile app: Apple and Google (distribution of the app, and delivery of notifications to your phone) and Expo (routing of notifications).
The payment provider, once it is connected to the site, for payments and identity checks. Vemly does not handle funds.
We do not sell your data. There is no advertising and no third-party audience measurement tool on the site.
8. Where it is processed
Some of these providers may process data outside the European Union, including in the United States, under the safeguards provided by law.
9. How long
Your account data is kept while your account is open. You can delete your account yourself, in the app or at www.vemly.ai/account/delete: your profile, what you published, your messages and your pictures are then erased.
Profile views are kept 90 days, then deleted.
When you or the other person delete your account, a conversation between members and all its attachments are deleted for both of you.
What is kept after that, as proof and detached from your account: the deals that were finished or cancelled, with their contract and the names typed to sign them, and the record of the agreements you accepted.
Business contact details used for our emails are kept until you object.
10. Audience measurement
We count visits ourselves, to know how many people come to the site and which pages are useful. We record the page viewed (without anything after a "?" in its address), the name of the site you came from, your country, the type of device and browser, the size class of your screen, how fast the page loaded, and whether you were signed in. No cookie and no advertising tracker is used, nothing is stored in your browser, and no third party receives this data.
Visitors are counted with an anonymous fingerprint, computed on our server from your IP address and your browser with a key that changes every day. Only this fingerprint is kept: it cannot identify you, it is never linked to your account, and it cannot follow you from one day to the next. Your IP address is not stored. These records are deleted after 13 months. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, your visits are not counted.
11. Cookies
The site uses only necessary cookies: to keep you signed in, and, if you arrive through a partner's link, to remember it.
There is no advertising cookie and no audience measurement cookie.
12. Your rights
You can ask to see your data, correct it, delete it, limit its use, receive it, or object to its use. Write to contact@vemly.ai. To delete your account and its data yourself: www.vemly.ai/account/delete.
You can also file a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.
13. Changes
If this policy changes, the new version is published on this page with its date.