Legal
Data processing agreement
Translation. This is a translation for your convenience. Only the Dutch version is binding.
Version of 10 November 2026
Building drawings can contain personal data, such as names and addresses. Whoever uses Vecdraft is the controller for that data. Vecdraft is the processor for the moment a drawing is read. This agreement sets out what Vecdraft may and must do with that data, as required by Article 28 of the GDPR. Below is a summary. You receive the full agreement, with the name of the AI provider, with your licence.
1. Parties and roles
The agreement is concluded between the customer and Constructim B.V., established in Tilburg, the Netherlands, Chamber of Commerce number 91374693, trading as Vecdraft.
- For personal data on drawings the customer has read, the customer is the controller and Vecdraft the processor.
- The customer's projects (scans, redrawn drawings and output) are on the customer's computer. Vecdraft does not store them. They fall outside this agreement.
- For its own purposes, such as a trial request, the licence and invoicing, Vecdraft is itself the controller. The privacy statement applies to that.
2. What Vecdraft processes
| Data | What happens to it |
|---|---|
| Images of drawings and the question to the AI assistant, with whatever they show, such as names and addresses | The service passes them on to the AI provider and returns the answer to the program. The service does not store them. |
| Usage: the number of requests and their size, per licence per month | The service counts it and keeps the count. It contains no data from the drawings. |
Vecdraft uses the drawings only to have them read, not for purposes of its own.
3. Instructions and confidentiality
Vecdraft processes the data only on the customer's instructions. The agreement and the customer's use of the program count as instructions: a drawing is only read when the customer gives the command in the program. Everyone who has access to the service on behalf of Vecdraft is bound by confidentiality.
4. Security
Vecdraft takes appropriate technical and organisational measures. Traffic between the program and the service is encrypted, the service does not store drawings, and the key the service uses to call the AI provider is kept only on Vecdraft's server.
5. Sub-processors
The customer gives general consent for sub-processors. Vecdraft announces a new sub-processor thirty days in advance; the customer may object and, if necessary, terminate.
| Sub-processor | Purpose |
|---|---|
| TransIP B.V. (hosting) | The website, in the Netherlands. The service itself runs on Constructim's own server in the Netherlands |
| An AI provider for reading drawings; its name is in the data processing agreement that comes with your licence | Reading the drawings the customer submits |
Where the AI provider processes the data, how long it keeps it and on what basis data may leave the European Economic Area is set out in the full agreement.
6. Assistance to the customer
The drawings are held by the customer. The customer therefore handles requests from data subjects for access, correction or deletion itself. If the customer needs information from Vecdraft for that, or help with a data protection impact assessment (DPIA), Vecdraft will assist.
7. Data breaches
If Vecdraft discovers a data breach that affects the customer's data, Vecdraft reports it without undue delay, and no later than 24 hours after discovery. This allows the customer to report to the supervisory authority within 72 hours. The report describes what happened, which data was affected, what Vecdraft is doing and what the customer can do.
8. Audits
The customer may request information showing that Vecdraft complies with the agreement, and may have an audit carried out once a year by an independent expert. The customer announces an audit thirty days in advance.
9. End
The service does not store drawings; after the agreement ends, Vecdraft therefore holds nothing from the drawings to return or delete. The projects remain on the customer's computer. This also applies to a trial.
10. Liability and law
Liability is governed by the same arrangement as in the terms and conditions: direct damage only, per year no more than what the customer paid in the preceding twelve months, and not in the event of intent or gross negligence on the part of Vecdraft. Article 82 of the GDPR continues to apply. The agreement is governed by Dutch law. Disputes go to the competent court of the District Court of Zeeland-West-Brabant (Rechtbank Zeeland-West-Brabant).
Questions
Do you have questions about the data processing agreement? Email support@vecdraft.com.