Privacy
VictorHub is a console your company signs into, and an engine that runs your company’s workflows. Those are two different kinds of data and this page keeps them apart, because your rights over them are answered by two different people.
Who is responsible
NeoProject d.o.o., Prušnikova ulica 2, 1210 Ljubljana-Šentvid, Slovenia. Registration number 3887995000, tax number 88766446.
For your account — the address you sign in with, and what you do in the console — that company decides why the data is held and answers for it.
For what a workflow runs on — a support ticket, a lead, a document — your employer decides, and we only process it on their instruction. A request about data inside a workflow is answered by them, from the system the data came from. We hold a copy, not the original.
What we hold about you
- Your email address, which is also how you sign in.
- A display name, if you set one.
- Your password, as an Argon2 hash. Nobody here can read it, and resetting it sends you a link rather than a new password.
- One row per browser you are signed in from: when it started and when it expires.
- A security record of sign-ins, failed sign-ins, password changes, role changes and deletions, each with the IP address it came from.
- Which companies you belong to and in what role, the apps you have connected (such as Claude), and which workflows, agents and credentials you created.
- Your address on the workflow runs you asked for, when your company’s system reports it. Your company’s admins see runs grouped by who asked.
No tracking, no advertising, and no automated decision that has a legal effect on you.
Why, and for how long
To let you in, to keep other people out, and to be able to answer later who changed something. Running your account is what the service is, so it rests on the contract with your company (Article 6(1)(b)). The security record rests on our legitimate interest in keeping the service safe (Article 6(1)(f)). Your account exists as long as your company keeps it. The rest expires on its own:
- A sign-in session: two weeks, or until you sign out.
- A password-reset link: one hour. An invitation: seven days. Either, once used or expired, is removed after a further month, and so is an app connection you have ended.
- The security record: six months.
- What a workflow or an agent ran on: three months in the hub and two weeks in the workflow engine, after which the copy is deleted here whether or not the original still exists. Conversation memory and test copies of runs: three months.
- Backups: up to seventeen days — seven in the backups themselves, and ten more in the daily snapshots of them.
Cookies
Two. victorhub_session is what keeps you signed in: it is not readable by scripts, it is sent only over HTTPS, and it is gone when you sign out. sidebar_state remembers whether you left the sidebar open. Both are needed for the console to work as you left it.
There is no analytics, no tracking pixel and no third-party cookie on this service, which is why you were not asked to accept anything.
Who else sees it
The companies below run parts of this service for us. We use each of them only to run this service, and are putting a data processing agreement in place with every one.
| Who | What for | Where |
|---|---|---|
| Hetzner | Runs the servers and the database. Backups go to a second Hetzner site. | Germany and Finland |
| Resend | Sends the invitation, password-reset and failure-notice emails. Gets the address and what the email says, nothing else. | United States |
| Sentry | Receives a report when the service hits an error: what failed and where in the code, without request bodies, cookies or email addresses. | EU |
| Discord | Carries our team's internal alerts: which company and which workflow failed, and when. Never the content of a request. | United States |
| Langfuse | Receives a trace of each agent run and each AI step in a workflow — the prompt, the conversation and what every tool returned — so we can debug and evaluate them. Never a provider key. | EU |
| Turns indexed documents into embeddings so search works. | Outside the EU | |
| Google Fonts | Serves the typeface in the invitation and password-reset emails. Your mail client fetches it when you open one, which shows Google your IP address. | Outside the EU |
| Telegram | Carries the messages between you and an agent's Telegram bot, when your company gives an agent one and you write to it. | Outside the EU |
| The AI provider your company chose | Receives what an agent or a workflow is asked to work on. Which one it is depends on the credential your company added — Anthropic, OpenAI, Google, Mistral, Azure or OpenRouter. | Depends on the provider |
Where a company is outside the EU, the transfer rests on the European Commission's Standard Contractual Clauses, which each of these providers offers as part of its data processing terms.
Your rights
You can ask for a copy of what we hold, in a form another service can read; ask for it to be corrected or deleted; ask us to restrict it while a question about it is settled; object to it being held; or complain to a supervisory authority — in Slovenia, the Information Commissioner.
A copy you do not have to ask for: your profile page has a Download my data button that hands you your account, your sessions, your whole security record, what you created, the apps you connected and the runs asked for under your address, as a file.
For anything else, write to info-victor@neoproject.ai. If the request is about data inside a workflow rather than about your account, we will point you at the company that owns it, because they are the only ones who can answer it properly.