Privacy Policy

1. Information processed on the marketing site

Essential account, service and transaction records support service delivery and permitted internal statistics regardless of usage information consent. When enabled, optional Google Analytics 4 collects selected page and product actions only after you allow it. Google receives a pseudonymous account identifier when signed in, browser identifiers and technical request information. Vitlane sends screen categories instead of full URLs and does not add purchase intent, email, wallet, addresses or payment information to analytics.

You can decline or withdraw usage information consent in Usage information preferences on this site or in the product user menu without losing service access. Your choice and notice time are kept for 180 days and analytics cookies for up to 90 days. The notice stays visible until you choose or close it. Closing does not change your consent. If you close without allowing, decline, or withdraw, it appears again after 24 hours. Usage tracking stays off until you agree. Event data is configured for up to 14 months in GA4 and 400 days in BigQuery. Withdrawal stops future collection; deletion of previously collected data can be requested through Customer conversations. Language and theme preferences are stored separately for presentation.

2. Information processed in the product

• Google account identifier, email and display-name snapshot, and sign-in state
• Connected public wallet address, ownership result, and user-approved purchase terms
• Encrypted shipping address and a shipping-condition snapshot for each purchase
• KYC provider case, issuer and schema identifiers, verification result, and expiry
• PayPal authorization, charge and refund records, TEST transactions, order and delivery progress, and access audit records

Google access and refresh tokens, wallet private keys, original wallet signatures, and original KYC evidence are not retained as product data.

3. Purposes of processing

We process this information to operate the marketing site, sign users in and restore their work, research products, approve purchase terms, process Live payments and orders or Sandbox/Testnet simulations, control access to personal information, and prevent abuse.

4. Retention and deletion

Account, purchase, and audit information is retained separately for as long as needed to provide the relevant function and meet security and audit needs. An account deletion request immediately blocks sign-in and ends all sign-in sessions, but that action does not itself mean physical deletion of account, purchase, audit, and shipping information is complete. In the current Limited Production stage, retention needs are reviewed manually for each request, separating deletable information from information that must remain for legal, dispute, or security response. The outcome and retention scope are sent to the email used for identity verification, and deletion is not shown as complete before it has been confirmed.

5. Shipping information and KYC protection

Shipping addresses are encrypted at rest and masked in default views. Authorized operator access is audited with its reason, including denied requests. Product research does not receive detailed shipping addresses or KYC information. For a Live order, the shipping and contact information needed to fulfill it is shared with the merchant and delivery provider; PayPal processes the payment information needed for the selected payment method.

6. User rights

You may request access, correction, deletion, or suspension of processing for your information. Users who can sign in may submit a request through the product's account-deletion function. To check status or make another privacy request, use Customer conversations in the product after signing in; we process the request after verifying account ownership.

7. Security measures

We apply encryption in transit, restricted database access, hashed authentication data, application-level encryption for shipping information, input validation, repeated-request limits, and audits of personal-information access.

8. Operator

The Vitlane operations team operates the service. Account users can check purchase progress and privacy-request status through Customer conversations in the product.