Legal
Privacy Policy
Privacy Policy 
Last updated: 01/10/2026
Last updated: 01/10/2026
Federico Sabbadini — ModelVault
Email: info@modelvault.it · PEC (certified email): info@pec.modelvault.it
We collect data provided voluntarily through the contact form (name, email, company, message), data required to manage the contract and subscription (billing details, invoicing), client-panel access data (credentials, usage logs), and technical browsing data (IP address, browser, pages visited) via server logs.
Data is used to: respond to contact requests and free demos, manage the development and delivery of commissioned projects, deliver the service via the panel on modelvault.it, manage the monthly subscription (maintenance, updates, support, infrastructure), and send technical communications relating to the active service. Data is not used for marketing without explicit consent.
Legitimate interest (contact requests and demos), performance of a contract (project development, client panel, monthly subscription), and legal obligations (invoicing, record-keeping).
Contact and demo data: 24 months. Contract and billing data: 10 years (tax obligation). Panel access logs: 12 months. Client AI model data: for the duration of the contract, deleted within 30 days of termination.
Company data provided by the client for training the AI model (documents, FAQs, emails, historical decisions) is processed exclusively for delivering the commissioned service. It is never used to train other clients' models, is never shared with third parties, and is retained only for the duration of the contract.
ModelVault's infrastructure is hosted on a dedicated VPS in Italy (Aruba Cloud, Italian datacenter), certified ISO 27001, ISO 27017 and ISO 27018. Data is encrypted at rest and in transit (TLS 1.2+). Application data and logs managed by ModelVault are preferentially stored in Italy. Access to production systems is restricted to the data controller via key-based SSH authentication.
Some services require external providers (web search, language models) to generate the analysis: in these cases, parts of the request may be transmitted to the providers necessary for delivering the service. Services that process data exclusively on-premises (document extraction, predictive models, network planning) do not send content to third parties. Specific details are indicated in the licence and documentation of each service.
Data is never sold or transferred. It is shared exclusively with technical providers necessary to deliver the service (hosting: Aruba S.p.A., Italy; AI model providers where applicable: only in transitory and anonymised form), which act as data processors under a GDPR-compliant DPA.
You have the right to access, rectify and delete your data, restrict its processing, and object to it. Write to info@modelvault.it or via PEC.
This site uses exclusively technical cookies necessary for operation. No profiling or third-party advertising cookies. See the Cookie Policy.
Designing and operating AI systems includes continuous training and updating for the people who develop, manage or use them for ModelVault. Understanding a system’s capabilities, limits and risks is part of the work, not a document added afterwards.
Every project is reviewed when its model, purpose, users or operating context changes.