Privacy Policy

Last updated: March 2026

At Vonbuild, we understand that the Architecture, Engineering, Construction and Real Estate (AEC-RE) industry handles data of absolute sensitivity: financial margins, strategic contracts, technical innovations, and critical infrastructure plans.

Our privacy policy is not merely a legal document. It is a software architecture.

1. Data sovereignty (European hosting)

The entirety of Vonbuild's core infrastructure is hosted on dedicated bare-metal servers located in Germany. We do not use the major American public cloud providers (AWS, GCP, Azure) for the persistent storage of your projects. Your data is protected by the GDPR and is shielded from extraterritorial legislation (Cloud Act).

Kubernetes with deny-all network policies by default. Encryption at rest and in transit (TLS 1.3). No data transits through servers located outside the European Union.

2. AI training: the zero data retention principle

None of your data (documents, drawings, queries, conversations) is used to train the foundational AI models of Vonbuild or our third-party partners.

The data you send to the Agentic OS is used solely to execute your tasks (inference) and is immediately forgotten by the external models. Your data remains in your private Knowledge Graph.

3. Multi-tenant isolation (per-user Pod)

Your data does not cohabit with that of your competitors. Each workspace and each user runs within a strictly isolated Kubernetes Pod. Network policies physically block any communication between Company A's Pod and Company B's Pod.

4. Email reading and M365 integration

The Vonbuild Agent does not have blanket, indiscriminate access to your mailbox.

It only reads and processes emails that have been explicitly linked, shared or routed to the project workspace via your trigger rules.

No AI scans your personal or private emails.

5. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: right to the complete deletion of your workspace and your Knowledge Graph
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights: privacy@vonbuild.com

Response time: 30 days maximum.

6. The on-premise option (Starter and Enterprise plans)

For companies requiring an absolute zero-trust policy, we offer the ability to connect your own open-source LLM models (Bring Your Own LLM) or to deploy the Vonbuild OS directly on your own servers (on-premise). In this way, no data transits through Vonbuild's cloud infrastructure.

7. Cookies

Our site uses only cookies strictly necessary for operation:

| Cookie | Purpose | Duration | |--------|---------|----------| | Session | Maintaining the user session | Session | | Language | Language preference (FR/EN/DE) | 1 year | | CSRF | Protection against CSRF attacks | Session |

No advertising or tracking cookies are used. We do not use Google Analytics, Facebook Pixel, or any advertising tracking tool.

8. Contact

For any questions relating to this privacy policy:

Vonbuild - Data Protection Email: privacy@vonbuild.com Website: https://vonbuild.com/en/contact

Competent supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Switzerland.