Privacy Policy — Valorys Capital

1. Data Controller

The data controller is SEDELLA LIMITED (“Valorys Capital”), an Irish Private Company Limited by Shares, registered under CRO number 791427, with registered office at Pod 2, The Old Station House, 15A Main Street, Blackrock, Dublin, A94 T8P8, Irlande.

For any question relating to your data: contact@valorys-capital.com.

2. Data We Collect

Identity and contact data: name, professional email address.
Company data: company name, revenue, industry.
Financial documents you upload: balance sheets, income statements, tax filings, etc.
Payment data: processed directly by our provider Stripe; we never store any card data.
Technical data: connection logs and audience-measurement data (subject to your consent).

3. Purposes and Legal Bases

Purpose	Legal basis
Carrying out the strategic analysis and producing the report	Performance of the contract
Managing your account and the executive workspace	Performance of the contract
Invoicing and accounting obligations	Legal obligation
Communications related to your file (transactional emails)	Performance of the contract
Website audience measurement	Consent
Service improvement and security	Legitimate interest

4. Recipients and Sub-processors

Your data is accessible to the Valorys Capital team in charge of your file and to the following technical sub-processors:

Supabase — database and document storage (European Union).
Stripe — payment processing.
Resend — delivery of transactional emails.
OpenAI — automated processing supporting document analysis.
Vercel — application hosting.

Some providers are located outside the European Union (United States). Such transfers are governed by the appropriate safeguards provided for under the GDPR (European Commission Standard Contractual Clauses). Your data is never sold or transferred to third parties for commercial purposes.

5. Retention Periods

Uploaded financial documents: 12 months from delivery of the report, then secure deletion.
Invoicing data: retained in accordance with statutory accounting obligations.
Account and analysis data: for the duration of the relationship, then archived or deleted.

6. Security

Documents are encrypted in transit (TLS 1.3) and at rest (AES-256), hosted on servers located within the European Union, and accessible only to personnel authorised to handle your file.

7. Your Rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, portability and objection. You may exercise them at contact@valorys-capital.com.

You may lodge a complaint with the Irish supervisory authority (the Data Protection Commission, dataprotection.ie) or, in France, with the CNIL (cnil.fr).

8. Cookies

Cookie management is detailed in our Cookie Policy.