Vintage VA
Privacy policy
Draft for legal review before final adoption.
Vintage VA handles business administration through trained human virtual assistants and AI-assisted drafting. This policy describes information used by this website and workspace. Last updated: 14 November 2026.
Information we collect
Consultation, waitlist and lead forms collect contact details, company, country and your stated business needs. Accounts include name, email, working language, time zone, country, optional phone and avatar, and organisation membership. Workspace records include tasks, messages, approved work, text attachments, time logs, assignments, incidents and audit events. VA applications include professional biographies, skills, availability, training references and review decisions.
Why we use it
We use this information to respond to enquiries, manage accounts and assignments, provide non-patient administrative support, verify VA training, review work, investigate incidents and measure service performance. Where applicable law requires a legal basis, processing relies on service-related contractual steps, legitimate interests in operating and securing the service, consent where required, and legal obligations.
AI and phone calls
AI is identified as AI and prepares drafts or takes messages; humans review work before delivery. Task text and portal questions are sent to our AI service provider through Lovable AI. Public front-desk chat text is not retained by Vintage VA; AI-call metadata and content-free safety flags are recorded. Phone calls are handled by ElevenLabs. Call numbers, timing and outcomes may be retained; non-patient summaries, transcripts and recording links may be stored when supplied. Flagged patient content is not retained as a transcript, summary or recording link on this platform. Content may still exist at the phone provider; do not share it in a call.
No patient information
Do not enter patient or protected health information, clinical content, or other sensitive personal information in forms, tasks, uploads or calls. Screening is a safeguard, not a guarantee. Patient-facing services are not available at launch. If information is mistakenly submitted, contact us promptly through the consultation form without repeating the information.
Professional directory
Only approved, training-verified VA profiles with publication permission appear in the signed-in directory. The directory shows professional name, biographies, skills, languages, country, time zone and availability. Private application notes, certificate references, phone numbers and account email are not published there. VAs can withdraw directory permission from their application profile.
Service providers and sharing
Lovable Cloud hosts application data and account services. Lovable AI handles AI requests; ElevenLabs handles voice calls. Google receives information needed when you choose Google sign-in. The site loads fonts from Google Fonts, which receives ordinary network request information. Training links lead to LES Institute, whose own policy applies after you leave this site. Authorised staff access information according to their assigned duties. We do not sell personal information. We may disclose information when legally required or necessary to protect rights and security.
Website analytics
Lovable’s visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. It records pages visited, referring sources, country, browser, operating system, device type, time on page, loading speed, errors, and clicks on buttons and links. This site has no analytics-choice banner, so these measurements are recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us; its privacy policy explains how it handles it.
Browser storage and security
Sign-in stores session information in your browser so you can access the workspace. Your language preference is also stored locally. These are separate from cookie-free visitor analytics. Access controls, role restrictions and audit records protect workspace information, but no system can guarantee absolute security. Do not share passwords or upload confidential information outside the agreed service scope.
Retention and international processing
Application and service records are retained for the service relationship and as needed for security, disputes and legal obligations; an application-wide fixed deletion schedule is not yet configured. Provider retention is governed by provider settings and agreements. Data may be processed outside your country. Where required, applicable contractual or other legal safeguards must support international transfers.
Your choices and requests
Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, request portability, withdraw consent or complain to a supervisory authority. Request help through the Contact / Book a consultation page and identify your account without submitting sensitive documents. We may need to verify identity and may retain records required by law. This business service is not directed at children.
Contact and updates
Contact Vintage VA through the consultation form for privacy questions. Changes will be posted here with an updated date. The operator’s legal entity name, postal address and dedicated privacy contact must be confirmed before this draft is adopted as final.