Privacy Policy

Last updated: June 2026

At Vonbuild, we understand that the Architecture, Engineering, Construction and Real Estate (AEC-RE) industry handles data of absolute sensitivity: financial margins, strategic contracts, technical innovations, and critical infrastructure plans.

Our privacy policy is not merely a legal document. It is a software architecture.

1. Data sovereignty (European hosting)

The entirety of Vonbuild's core infrastructure is hosted on dedicated bare-metal servers located in Germany. We do not use the major American public cloud providers (AWS, GCP, Azure) for the persistent storage of your projects. Your data is protected by the GDPR and is shielded from extraterritorial legislation (Cloud Act).

Kubernetes with deny-all network policies by default. Encryption at rest and in transit (TLS 1.3). No data transits through servers located outside the European Union.

2. AI training: the zero data retention principle

None of your data (documents, drawings, queries, conversations) is used to train the foundational AI models of Vonbuild or our third-party partners.

The data you send to the Agentic OS is used solely to execute your tasks (inference) and is immediately forgotten by the external models. Your data remains in your private Knowledge Graph.

3. Multi-tenant isolation (per-user Pod)

Your data does not cohabit with that of your competitors. Each workspace and each user runs within a strictly isolated Kubernetes Pod. Network policies physically block any communication between Company A's Pod and Company B's Pod.

4. Email, calendar and cloud storage integrations (Microsoft & Google)

The Vonbuild Agent does not have blanket, indiscriminate access to your mailbox, calendar or files.

When you connect a Microsoft 365 account (Outlook, OneDrive) or a Google account (Gmail, Google Calendar, Google Drive), Vonbuild accesses only the data required to provide the features you use: routing and processing project-related emails, scheduling, and reading or writing project documents you have linked to a workspace. Access happens only with your explicit authorization and is governed by your trigger rules.

No AI scans your personal or private emails.

Google API Services — Limited Use

Vonbuild's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We access Gmail, Google Calendar and Google Drive data only to provide the user-facing features of Vonbuild described above.
  • We do not use this data to train or improve generalized AI/ML models.
  • We do not use this data for advertising, and we do not sell it or transfer it to third parties, except as needed to provide the service, to comply with the law, or in connection with a merger or acquisition with prior user notice.
  • We do not allow humans to read this data unless you give explicit consent, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.
  • Google user data is encrypted in transit and at rest, and retained only as long as needed to provide the service. You can disconnect a provider and request deletion at any time.

5. Your rights

In accordance with the GDPR, you have the following rights:

  • Right of access: obtain a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: right to the complete deletion of your workspace and your Knowledge Graph
  • Right to data portability: receive your data in a structured format
  • Right to object: object to the processing of your data
  • Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights: [email protected]

Response time: 30 days maximum.

6. The on-premise option (Starter and Enterprise plans)

For companies requiring an absolute zero-trust policy, we offer the ability to connect your own open-source LLM models (Bring Your Own LLM) or to deploy the Vonbuild OS directly on your own servers (on-premise). In this way, no data transits through Vonbuild's cloud infrastructure.

7. Cookies

Our site uses only cookies strictly necessary for operation:

| Cookie | Purpose | Duration | |--------|---------|----------| | Session | Maintaining the user session | Session | | Language | Language preference (FR/EN/DE) | 1 year | | CSRF | Protection against CSRF attacks | Session |

No advertising or tracking cookies are used. We do not use Google Analytics, Facebook Pixel, or any advertising tracking tool.

8. Contact

For any questions relating to this privacy policy:

Vonbuild - Data Protection Email: [email protected] Website: https://vonbuild.com/en/contact

Competent supervisory authority: Federal Data Protection and Information Commissioner (FDPIC), Switzerland.