Last updated 1 November 2026
Albion Ltda operates Vexquota and is the controller of account data; for workspace data you upload, your company is the controller and Albion Ltda the processor.
Only to run the service: calculate commissions, send the e-mails you ask for (verification, sign-in links, statements) and bill your subscription.
Stripe (payments), Resend (transactional e-mail from a vexquota.com address), Cloudflare (network delivery and protection of our websites, plus cookieless page-view statistics: no cookies, no cross-site tracking) Google (Analytics on our public website, only if you accept it in the cookie bar), our AI model provider (only when an admin uses AI plan import: the plan text they submit is sent to draft rules and is not stored by us) and our hosting provider. We do not sell data and do not use your data to train models.
Necessary: the app sets a session cookie when you sign in and a security cookie that protects forms (CSRF). They hold no tracking data and expire on their own.
Optional, on vexquota.com only: if you click Accept in the cookie bar, Google Analytics sets cookies (_ga, _ga_*, kept up to 14 months) to count visits to our public pages. Before you choose, or if you decline, no analytics cookie is stored; Google may still receive a cookieless signal that a page was viewed, without identifiers. We never enable advertising storage, we strip query strings from the pages we report, and the app (where your commission data lives) has no analytics at all. Your browser’s Global Privacy Control signal counts as a refusal.
Your choice is kept in your browser.
Workspace admins can export every record as JSON from Settings → Export and delete the workspace from Settings. Individuals can write to [email protected] to access, correct or erase their data.
Deleted workspaces are purged after a 7-day grace period. Backups roll over within 30 days.