1. Data controller
The controller of your data is Edward Rodríguez (persona física), domiciled at Colonia, Uruguay. Contact: privacy@vitrama.com.
2. Data we collect
When you create your account: name, email, password (hashed), phone number and country. Phone and country are asked at signup even if you do not have a store yet.
If you sign in with Google: we receive your email and name from Google and use them to create or identify your account. We never receive your Google password and we do not access anything else in your account.
If you open a store: its name, link, description, city, currency, contact phone, the images you upload and, if you arrived via a referral link, who invited you.
As a buyer: name, email and phone you voluntarily provide when placing an order; IP and user-agent for abuse prevention. Your name may be stored locally in your browser so a store doesn't ask for it again.
If you order while signed in to vitrama, the order is linked to your account so we do not ask for the same details again. The vendor does NOT see your account or what you bought in other stores: only what you gave them in their order.
If you answer a question we ask inside the panel, we store your answer along with your email so we can follow up. If you delete your account, those answers are deleted with it.
First-party analytics: store view and order-intent events, no third-party cookies. We also use Cloudflare Web Analytics to measure web traffic anonymously and in aggregate, with no cookies and no identifier that tracks you across sites.
3. The mobile app
The vitrama app for Android and iOS handles the same data as the website, for the same purposes: it is the same account and the same store, seen from your phone.
Permissions: the app asks for the camera and your photos ONLY when you choose to upload an image (a product, your logo, your store cover), and only the one you pick is used. We do not access your gallery outside that moment. We do not ask for your location, your contacts or your calendar.
Your session is stored on the phone in the system's secure storage; your cart, your saved products and the conversations you opened are stored in the app's local storage. None of that is synced to our servers or shared with anyone: delete the app and it goes with it.
The app ships no analytics or advertising SDK, does not use the phone's advertising identifier and does not track you across apps or sites. The metrics a vendor sees in their panel are computed on our servers, same as on the web.
4. How to delete your account
You can delete your account yourself, without writing to us: in the app, under "Account" → "Delete account"; on the web, from the panel's Settings. We will ask for your email and password to confirm.
Confirming deletes your account, your store if you had one, your products, the orders it received and your analytics events. Orders you placed in other stores are not deleted — they belong to that vendor, who is their controller — but they stop being linked to your account. Moderation reports and the audit log also survive, storing the email as of the moment of the event: that is the exception explained under "Retention".
If you would rather we do it, write to privacy@vitrama.com from the account's email address.
5. Legal basis
We process your data to perform the service contract (render your store, generate your orders), on legitimate interest (security, abuse prevention, product improvement), and, where applicable, with your consent (e.g. the newsletter).
6. How we use your data
To provide the service, send transactional email notifications, moderate and prevent abuse, and compute aggregate statistics to improve the product.
Newsletter: if you voluntarily subscribe, we use your email only to send you vitrama news. You can unsubscribe at any time via the link in every email.
We do not sell personal data. We do not run third-party ads.
7. Buyer data and the vendor's role
When a buyer places an order, their data (name, email, message) reaches the vendor of that store. For that data the vendor is the controller and vitrama acts as a processor that only transmits and stores it on the vendor's behalf.
The vendor agrees to use buyer data only to handle the sale and to comply with applicable data-protection law.
8. Third-party processors and transfers
MongoDB Atlas (database), Cloudflare (web hosting, CDN + Web Analytics), Railway (API hosting), Resend (transactional email), Cloudflare R2 (image storage) and Google (only if you choose to sign in with Google). All under data-processor agreements.
Some of these providers process data outside your country. Such transfers rely on the contractual safeguards required by applicable law.
9. Security
Passwords are stored hashed, connections travel encrypted (HTTPS) and access to data is restricted. No system is 100% foolproof, but we apply reasonable measures to protect it.
10. Retention
Account data: as long as the account is active. You may request deletion at privacy@vitrama.com.
Reset and verification tokens: expire in 1h and 48h respectively. Auto-deleted.
Analytics events: automatically deleted after one year (365 days).
11. Your rights
You may request access, rectification, objection and deletion of your personal data at privacy@vitrama.com. We respond within 5 business days.
You may escalate to your local data protection authority: URCDP (Uruguay), AAIP (Argentina), ANPD (Brazil), INAI (Mexico), or your local DPA in the EU.
12. Incident notification
If a security breach affecting your personal data occurs, we will notify affected users and the relevant authority within the timeframes required by applicable law.
13. Minors
The service is not directed at users under 18. If we detect a minor account we remove it.
14. Cookies
We use only strictly necessary cookies and storage. Details are in our Cookie Policy.
15. Changes
We will notify major changes by email at least 15 days before they take effect.
16. Contact
Data protection officer: privacy@vitrama.com.