Sign up

1. Who we are

vitrama is a platform for small vendors to spin up free online stores. The service is operated by Edward Rodríguez (persona física), domiciled at Colonia, Uruguay ("vitrama", "we").

We don't process payments and we don't handle shipping. Each store represents an independent vendor.

The service is used from the web (vitrama.com) and from the mobile app for Android and iOS. Same account, same rules: these terms cover both.

2. Account signup

By creating an account you declare that you are at least 18, have legal capacity to contract, and are responsible for the content you publish. You are responsible for keeping your password safe and for all activity under your account.

You can create an account with an email and password, or by signing in with Google. If you use Google, your vitrama account is tied to that email: whoever can access that mailbox can access your account.

Having an account does not require you to open a store. You can use it only to buy, and open your store later or never.

3. Plans and payments

vitrama offers a free plan and a paid plan (Pro) with extra features. Prices and plan details are shown in the app before you subscribe.

If you subscribe to a paid plan, it renews for the chosen period unless you cancel before the next cycle. You can cancel anytime from the dashboard; on cancellation you keep the plan until the end of the period already paid. Except where the law requires otherwise, amounts already paid are not prorated or refunded.

4. Vendor content

Products, images, text and data uploaded by the vendor are their sole responsibility. vitrama does not verify or endorse that content.

The vendor warrants that they own or have the rights to what they publish and that they comply with applicable laws (tax, health, consumer protection, etc.).

To provide the service, the vendor grants us a non-exclusive, worldwide, royalty-free, revocable license to host, display and reproduce their content within vitrama. The license ends when the vendor deletes the content or their account, except for temporary backups.

5. Prohibited content

Listing illegal, counterfeit or stolen goods; weapons; drugs; explicit sexual content; hate speech or any material that violates applicable laws is not allowed.

6. Reports and suspension

Anyone can report a store or product. We may suspend or remove stores that violate these terms; where reasonable we'll give notice, but for serious violations or risk to others we may act without prior notice.

Buyer reviews are published automatically and go through an offensive-language filter. Sellers cannot delete them: if a seller believes a review is fake, offensive or exposes personal data, they can report it, and it may stay hidden for a short period while we review it. Whether it comes down is vitrama's decision.

If your store was suspended and you believe it was a mistake, email legal@vitrama.com to have it reviewed.

7. Vendor–buyer relationship

Orders placed by a buyer (via WhatsApp or email) form a contract between buyer and vendor. vitrama is not a party to that relationship and is not liable for defaults, quality, delivery or returns.

8. vitrama's intellectual property

The software, design, the "vitrama" brand and all platform materials belong to us or our licensors. You may not copy, resell or create derivative works from them without authorization. This does not affect the vendor's rights over their own content.

9. Account deletion and termination

You can delete your account anytime yourself, from the app or from the web dashboard, no permission needed; you can also email privacy@vitrama.com. We may suspend or close accounts that violate these terms or the law.

When an account is closed, the store goes offline and content is deleted per our retention policy.

10. Changes and availability

We may modify, suspend or discontinue features of the service. The service is provided "as is", with no warranty of continuous availability or commercial results.

11. Limitation of liability

To the maximum extent permitted by law, vitrama is not liable for indirect damages, lost profits or data loss arising from use of the service.

12. Indemnification

The vendor will hold vitrama harmless against any third-party claim arising from their content, their sales, or breach of these terms or the law.

13. Governing law and jurisdiction

These terms are governed by the laws of Uruguay. Any dispute is submitted to the competent courts of Uruguay, without prejudice to the consumer-protection rights the buyer may have in their own country.

14. Changes to these terms

We may update these terms with reasonable prior notice via email or in the dashboard. Continued use implies acceptance.

15. Contact

Reach us at legal@vitrama.com for any legal claim or question.

1. Data controller

The controller of your data is Edward Rodríguez (persona física), domiciled at Colonia, Uruguay. Contact: privacy@vitrama.com.

2. Data we collect

When you create your account: name, email, password (hashed), phone number and country. Phone and country are asked at signup even if you do not have a store yet.

If you sign in with Google: we receive your email and name from Google and use them to create or identify your account. We never receive your Google password and we do not access anything else in your account.

If you open a store: its name, link, description, city, currency, contact phone, the images you upload and, if you arrived via a referral link, who invited you.

As a buyer: name, email and phone you voluntarily provide when placing an order; IP and user-agent for abuse prevention. Your name may be stored locally in your browser so a store doesn't ask for it again.

If you order while signed in to vitrama, the order is linked to your account so we do not ask for the same details again. The vendor does NOT see your account or what you bought in other stores: only what you gave them in their order.

If you answer a question we ask inside the panel, we store your answer along with your email so we can follow up. If you delete your account, those answers are deleted with it.

First-party analytics: store view and order-intent events, no third-party cookies. We also use Cloudflare Web Analytics to measure web traffic anonymously and in aggregate, with no cookies and no identifier that tracks you across sites.

3. The mobile app

The vitrama app for Android and iOS handles the same data as the website, for the same purposes: it is the same account and the same store, seen from your phone.

Permissions: the app asks for the camera and your photos ONLY when you choose to upload an image (a product, your logo, your store cover), and only the one you pick is used. We do not access your gallery outside that moment. We do not ask for your location, your contacts or your calendar.

Your session is stored on the phone in the system's secure storage; your cart, your saved products and the conversations you opened are stored in the app's local storage. None of that is synced to our servers or shared with anyone: delete the app and it goes with it.

The app ships no analytics or advertising SDK, does not use the phone's advertising identifier and does not track you across apps or sites. The metrics a vendor sees in their panel are computed on our servers, same as on the web.

4. How to delete your account

You can delete your account yourself, without writing to us: in the app, under "Account" → "Delete account"; on the web, from the panel's Settings. We will ask for your email and password to confirm.

Confirming deletes your account, your store if you had one, your products, the orders it received and your analytics events. Orders you placed in other stores are not deleted — they belong to that vendor, who is their controller — but they stop being linked to your account. Moderation reports and the audit log also survive, storing the email as of the moment of the event: that is the exception explained under "Retention".

If you would rather we do it, write to privacy@vitrama.com from the account's email address.

5. Legal basis

We process your data to perform the service contract (render your store, generate your orders), on legitimate interest (security, abuse prevention, product improvement), and, where applicable, with your consent (e.g. the newsletter).

6. How we use your data

To provide the service, send transactional email notifications, moderate and prevent abuse, and compute aggregate statistics to improve the product.

Newsletter: if you voluntarily subscribe, we use your email only to send you vitrama news. You can unsubscribe at any time via the link in every email.

We do not sell personal data. We do not run third-party ads.

7. Buyer data and the vendor's role

When a buyer places an order, their data (name, email, message) reaches the vendor of that store. For that data the vendor is the controller and vitrama acts as a processor that only transmits and stores it on the vendor's behalf.

The vendor agrees to use buyer data only to handle the sale and to comply with applicable data-protection law.

8. Third-party processors and transfers

MongoDB Atlas (database), Cloudflare (web hosting, CDN + Web Analytics), Railway (API hosting), Resend (transactional email), Cloudflare R2 (image storage) and Google (only if you choose to sign in with Google). All under data-processor agreements.

Some of these providers process data outside your country. Such transfers rely on the contractual safeguards required by applicable law.

9. Security

Passwords are stored hashed, connections travel encrypted (HTTPS) and access to data is restricted. No system is 100% foolproof, but we apply reasonable measures to protect it.

10. Retention

Account data: as long as the account is active. You may request deletion at privacy@vitrama.com.

Reset and verification tokens: expire in 1h and 48h respectively. Auto-deleted.

Analytics events: automatically deleted after one year (365 days).

11. Your rights

You may request access, rectification, objection and deletion of your personal data at privacy@vitrama.com. We respond within 5 business days.

You may escalate to your local data protection authority: URCDP (Uruguay), AAIP (Argentina), ANPD (Brazil), INAI (Mexico), or your local DPA in the EU.

12. Incident notification

If a security breach affecting your personal data occurs, we will notify affected users and the relevant authority within the timeframes required by applicable law.

13. Minors

The service is not directed at users under 18. If we detect a minor account we remove it.

14. Cookies

We use only strictly necessary cookies and storage. Details are in our Cookie Policy.

15. Changes

We will notify major changes by email at least 15 days before they take effect.

16. Contact

Data protection officer: privacy@vitrama.com.