Privacy Policy

Account details. Your name, email, social handles, city, and for creators the follower counts that determine your rank.

Activity. Deals you post or claim, requests and offers, messages sent through Vecino, and the record of when you accepted our terms, including the version accepted and the time.

Payment details. Handled by our payment processor. We store the last four digits of a card and a processor reference. We never see or store full card numbers.

Technical data. IP address, device and browser type, and pages visited, used for security and to understand what to fix.

To run the marketplace: showing deals to the right people, matching requests with businesses, processing payments, calculating ranks, preventing fraud, and proving that terms were accepted when a dispute arises. We also use contact details to send transactional messages, such as reminding a creator that a post is due.

Businesses see a creator’s public profile, rank, follower band, completed deals, and any messages exchanged. They do not see your email or payment details.

Creators see a business’s public profile and deals. They never see a business’s payment details or spend.

Service providers process data on our behalf: our payment processor, hosting, and email delivery. They are bound by contract to use it only for that purpose.

We do not sell your personal information.

Messages sent through Vecino are stored so both sides keep a record and so we can investigate disputes and abuse reports. Treat them as you would any business correspondence rather than a private channel.

Account data for as long as your account is open, then up to 12 months after closure. Records of deals, payouts and terms acceptance are kept longer where tax, accounting or dispute-resolution obligations require it. [Confirm exact retention periods with an accountant.]

You can access, correct, export or delete your personal data, and object to certain processing. Depending on where you live you may have additional rights under laws such as the CCPA or GDPR, including the right not to be discriminated against for exercising them. Contact us and we will respond within the period the applicable law requires.

[Needs review.] Which regimes actually apply depends on where you incorporate and where your users are. A lawyer should confirm this section, and whether you need a CCPA “Do Not Sell or Share” link.

We use encryption in transit, restrict access to production data, and rely on a PCI-compliant processor so card details never touch our servers. No system is perfectly secure, and we will notify affected users and regulators as required if a breach occurs.

Vecino is not for anyone under 18. We do not knowingly collect data from children, and will delete such an account if we find one.

Privacy questions or requests: [privacy@yourdomain.com]. Data controller: [entity name and address, once incorporated].