Privacy Policy

1. Introduction

Vinta ("we", "our", "us") operates the sales tracking and team management platform available at this site. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully. By using Vinta, you consent to the data practices described in this policy.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Account information: name, email address, and profile picture provided through Google OAuth authentication
• Form data: sales reports, submissions, and other data you enter into Vinta forms
• Team information: team member names, emails, roles, and invitation details
• Workspace settings: workspace names, configurations, and preferences
• Communication preferences: notification settings and integration configurations

2.2 Information Collected Automatically

• Usage data: pages visited, features used, form submission timestamps, and analytics interactions
• Device information: browser type, operating system, and screen resolution
• Log data: IP address, access times, and referring URLs
• Cookies: essential session cookies for authentication (see Section 7)

2.3 Information from Third-Party Services

• Google: profile information (name, email, profile picture) via Google OAuth, and calendar data if you enable the Google Calendar integration
• Slack: workspace and channel information if you enable the Slack integration
• Whop: payment status and subscription information for billing

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Vinta platform
• Authenticate your identity and manage your account
• Process billing and subscription management through Whop
• Send notifications you have opted into (email, Slack, in-app)
• Enable third-party integrations that you explicitly authorize (Google Calendar, Slack)
• Generate analytics and reports about your sales data
• Improve our services and develop new features
• Respond to support requests and communicate with you
• Detect and prevent fraud, abuse, or security incidents

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• Payment processing: We share billing-related information with Whop to process subscriptions and payments. Whop's privacy policy governs their use of this data.
• Google Calendar integration: When you connect Google Calendar, we access your calendar data using Google APIs solely to display events and create meetings on your behalf. We comply with the Google API Services User Data Policy, including the Limited Use requirements.
• Slack integration: When you connect Slack, we send notifications to channels you specify. We only access channels and permissions you explicitly authorize.
• Legal requirements: We may disclose information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Google API Services Disclosure

Vinta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google Calendar scopes necessary to provide calendar functionality
• We do not use Google user data for advertising purposes
• We do not share Google user data with third parties except as necessary to provide or improve the service, or as required by law
• We do not allow humans to read Google user data unless you provide affirmative consent, it is necessary for security purposes, or it is required by law
• You can revoke Vinta's access to your Google data at any time through your Google Account permissions

6. Data Storage and Security

Your data is stored securely using industry-standard practices:

• All data is transmitted over encrypted HTTPS connections
• Database connections use SSL/TLS encryption
• Authentication tokens are stored securely using HTTP-only cookies
• Third-party API credentials are stored as encrypted environment variables and are never exposed to the client
• We implement access controls to limit data access to authorized personnel only

While we use commercially reasonable measures to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies

We use only essential cookies required for the service to function:

• Authentication cookies: Used to maintain your login session
• Preference cookies: Used to store your settings (e.g., dark mode preference)

We do not use third-party tracking cookies, advertising cookies, or analytics cookies from external providers.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you
• Correction: You can update or correct inaccurate information through your account settings
• Deletion: You can request deletion of your account and associated data through the Settings page or by contacting us
• Data portability: You can request an export of your data in a machine-readable format
• Withdraw consent: You can disconnect third-party integrations at any time through Settings
• Opt out: You can opt out of non-essential communications through your notification preferences

To exercise any of these rights, use the relevant options in your account settings or contact us at the support email listed on this site.

10. Children's Privacy

Vinta is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised effective date. Your continued use of Vinta after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at the support email listed on this site.