Privacy Policy

1. Information processed on the marketing site

The marketing site uses Cloudflare Web Analytics to aggregate page views and performance metrics. This beacon does not use cookies or browser storage and sends the current page path, referrer, Web Vitals, and similar performance information to Cloudflare. Vitlane does not add purchase intent, email, wallet, or payment information entered in the product to Analytics configuration or payloads.

2. Information processed in the TEST product

• Google account identifier, email and display-name snapshot, and sign-in state
• Connected public wallet address, ownership result, and user-approved purchase terms
• Encrypted shipping address and a shipping-condition snapshot for each purchase
• KYC provider case, issuer and schema identifiers, verification result, and expiry
• TEST payment transactions, order processing, and access audit records

Google access and refresh tokens, wallet private keys, original wallet signatures, and original KYC evidence are not retained as product data.

3. Purposes of processing

We process this information to operate the marketing site, sign users in and restore their work, research products, approve purchase terms, process TEST payments and simulated orders, control access to personal information, and prevent abuse.

4. Retention and deletion

Account, purchase, and audit information is retained separately for as long as needed to provide the relevant function and meet security and audit needs. An account deletion request immediately blocks sign-in and ends all sign-in sessions, but that action does not itself mean physical deletion of account, purchase, audit, and shipping information is complete. In the current Limited Production stage, retention needs are reviewed manually for each request, separating deletable information from information that must remain for legal, dispute, or security response. The outcome and retention scope are sent to the email used for identity verification, and deletion is not shown as complete before it has been confirmed.

5. Shipping information and KYC protection

Shipping addresses are encrypted at rest and masked in default views. They may be revealed only to the assigned operator for a purchase with final payment confirmation after the operator records an order-processing reason; both successful and denied access is audited. Connected Agents receive neither detailed shipping information beyond country and city nor KYC information.

6. User rights

You may request access, correction, deletion, or suspension of processing for your information. Users who can sign in may submit a request through the product's account-deletion function. To check status or make another privacy request, use Customer conversations in the product after signing in; we process the request after verifying account ownership.

7. Security measures

We apply encryption in transit, restricted database access, hashed authentication data, application-level encryption for shipping information, input validation, repeated-request limits, and audits of personal-information access.

8. Operator

The Vitlane operations team operates the service. Account users can check purchase progress and privacy-request status through Customer conversations in the product.