Legal ยท Draft
Privacy Policy
1. Preamble
This Privacy Policy is issued by Vital Webmaster LLC. It explains how we collect, use, share, and protect your personal information. Contact us at [email protected]. We may update this Policy and will notify you of material changes; substantial changes may require renewed consent. Retention periods for each data category are detailed in our Data Handling and Deletion Schedule.
2. 1. Definitions
- Personal Data: any information that identifies or can identify a natural person.
- Processing: any operation on Personal Data (collection, use, storage, sharing, deletion).
- Controller: Vital Webmaster LLC, which determines the purposes and means of processing.
- Data Subject: the individual whose Personal Data is processed.
- Third-Party Service Provider: any third party engaged by us to assist in providing services.
- Data Handling and Deletion Schedule: our detailed retention and deletion policy (separate document).
3. 2. Information We Collect
We collect the following categories of personal data depending on your interactions with our services. Retention periods for each category are set out in our Data Handling and Deletion Schedule.
| Category | Examples | Purpose | Lawful Basis |
|---|---|---|---|
| Contact & Identity Information | Name, business, email, phone, address | Account creation, communication, support | Contract, Legitimate Interests, Consent |
| Account & Profile Data | Username, hashed password, company, user ID | Account management, security, personalization | Contract, Legitimate Interests |
| Billing & Payment Data | Billing address, payment method (last 4), transactions, tax/VAT ID | Payments, invoicing, compliance | Contract, Legal Obligation |
| Usage & Activity Data | Logins, IP, device/browser info, features used | Analytics, security, troubleshooting | Legitimate Interests, Consent (analytics) |
| Uploaded Content | Files, documents, recordings, business data, AI outputs | Service delivery, storage, AI features | Contract, Legitimate Interests, Consent |
| Cookies, Tracking & Analytics | Cookies, device IDs, geolocation, analytics | Site functionality, analytics, personalization | Consent (non-essential), Legitimate Interests |
| Support & Communications | Support tickets, chat transcripts, email correspondence | Support delivery, dispute resolution, service quality | Contract, Legitimate Interests |
| Marketing & Preferences | Email opt-in/out, campaign interactions, subscription preferences | Marketing (with consent), preference management | Consent, Legitimate Interests |
| AI-Generated Outputs | Generated text, audio narrations, images, video, reports | Service delivery, output history | Contract, Legitimate Interests |
| Third-Party Integration Data | Data exchanged with connected services (CRMs, APIs, webhooks) | Workflow automation, integrations | Contract, Legitimate Interests, Consent |
| Legal & Compliance Data | Consent records, data subject requests, audit logs, deletion records | Compliance, legal defense, regulatory audits | Legal Obligation, Legitimate Interests |
4. 3. How We Use Your Information
We process your data only for the purposes described and in accordance with applicable law.
- Create and manage your account
- Deliver and improve our features and AI capabilities
- Process payments and manage subscriptions
- Communicate about updates, support and account matters
- Provide analytics, security and troubleshooting
- Comply with legal obligations and defend legal claims
5. 4. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. For EU/EEA/UK users, transfers outside the EEA rely on Standard Contractual Clauses (SCCs) or an adequacy decision. For details on individual provider transfer mechanisms, see our Data Handling and Deletion Schedule.
6. 5. Data Security
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include encryption at rest and in transit, access controls, regular security reviews, and contractual security requirements for all sub-processors. For deletion methods and audit procedures, see our Data Handling and Deletion Schedule.
7. 6. Data Retention and Deletion
We retain personal data only as long as necessary for the purposes described or as required by law. Full retention periods for each data category are detailed in our Data Handling and Deletion Schedule. Upon expiry of the retention period or upon a verified deletion request, data is securely deleted or irreversibly anonymized using industry-standard methods (multi-pass overwriting, cryptographic erasure, or secure erase commands). Deletion and anonymization actions are logged and periodically audited. For data processed by third-party providers, we coordinate deletion and obtain confirmation from those providers. Contact [email protected] to submit a deletion request.
8. 7. Sharing Your Information, Third-Party Service Providers
We share personal data only with the trusted service providers listed below, under contractual and security safeguards (DPAs, SCCs where required). We do not sell personal data.
| Category | What they receive | Why |
|---|---|---|
| Hosting (our own servers) | Account data, watchlists, portfolio records | Running the service |
| Network edge and DNS provider | IP address and request metadata | Delivering the site and protecting it from abuse |
| Domain registries and registrar | The domain names you check (never your identity) | Answering availability and price |
| Transactional email provider | Your email address and the message | Account and report emails |
| Payment processor (when paid plans start) | Billing details | Taking payment; not active today |
The named list of providers is given in the signed DPA and on request to [email protected].
9. 8. Children's Privacy
Our services are not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact [email protected] for immediate deletion.
10. 9. Cookies and Tracking Technologies
We use essential, functional and (with consent) analytics cookies. See our Cookie Policy for full details. Non-essential cookies require your consent and can be managed via our consent banner or your browser.
11. 10. Your Rights
Depending on your jurisdiction you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority. To exercise any right, contact [email protected]. We will verify your identity and respond within the legally required timeframe (30 days for GDPR; 45 days for CCPA).
- Right to Access, know what data we hold about you
- Right to Rectification, correct inaccurate data
- Right to Deletion (Right to be Forgotten)
- Right to Restriction of Processing
- Right to Data Portability
- Right to Object to processing
- Right to Opt Out of Sale/Sharing (CCPA/CPRA, we do not sell data)
- Right to Non-Discrimination for exercising rights
12. Contact
For privacy inquiries, data subject requests, or to reach our Data Protection contact: [email protected].
Machine-drafted from the CloviTek base terms (9 October 2026) and edited for ZoneVouch. Not legal advice.