Vertacomai LLC · Legal
WebContesta Privacy Policy
CCPA · GDPR · NY SHIELD · CAN-SPAM compliant template
This Privacy Policy explains how Vertacomai LLC ("Vertacomai," "we," "us," or "our") collects, uses, shares, and protects information when you visit webcontesta.com (the "Site") or subscribe to the WebContesta service (the "Service"). By using the Site or the Service, you agree to the practices described here. If you don't agree, please don't use the Site or the Service.
This Policy applies only to information collected by Vertacomai through the Site and the Service. It does not apply to data collected by individual WebContesta customers on their own websites built using our platform — each WebContesta customer is responsible for their own privacy practices on their site.
1. Who We Are & How to Contact Us
Vertacomai LLC is a New York limited liability company headquartered in New York City. We operate the WebContesta service — a productized website-as-a-service product.
For privacy-related questions, requests, or concerns, contact us:
- Email: privacy@webcontesta.com
- WhatsApp: [+1-XXX-XXX-XXXX]
- Mail: Vertacomai LLC, [Business address — to be added before go-live]
We respond to privacy inquiries within 30 days, often much sooner.
2. Information We Collect
We collect three types of information: information you give us directly, information collected automatically, and information from third parties.
a. Information You Give Us Directly
- Identity info — name, business name, business address, email address, phone number, WhatsApp number
- Account info — business legal name, business display name, year founded, owner/manager name, language preference
- Business content — business hours, services offered, taglines, photographs, logos, domain preferences, social media URLs
- Payment info — collected and processed by Stripe; we do not store full credit card numbers (we store only the last 4 digits, card type, and Stripe customer ID)
- Communications — messages you send us via email, WhatsApp, or the intake form, including support requests and quarterly photo submissions
b. Information Collected Automatically
- Technical info — IP address, browser type, operating system, device identifiers, referring URL
- Usage data — pages visited, time spent on Site, clicks, form completions, drop-off points
- Cookies & similar tech — see Section 6 for our cookie practices
- Location data — approximate location derived from IP address (city/region level only, not GPS)
c. Information from Third Parties
- Stripe — payment confirmation, billing address, card type
- Google Analytics — aggregated traffic and engagement data
- Meta (Facebook/Instagram) Pixel — conversion tracking for marketing campaigns
- Twilio — WhatsApp message delivery and read receipts
- Domain registrars (Namecheap, Porkbun) — domain registration confirmations and renewal data
d. Sensitive Information
We do not knowingly collect or process the following sensitive personal information: Social Security numbers, government-issued ID numbers, financial account numbers (beyond what Stripe processes), precise geolocation, genetic or biometric data, health information, or information about union membership or political views.
3. How We Use Your Information
We use your information for the following purposes:
- Provide the Service — building and maintaining your website, processing payments, registering your domain, sending intake notifications via WhatsApp;
- Communicate with you — sending build updates, quarterly refresh reminders, payment receipts, support responses, and service announcements;
- Improve the Service — analyzing usage patterns to identify friction in the intake form, optimize the template, and refine our operational processes;
- Marketing — sending information about new Contesta-suite products, special offers, or industry tips (you can opt out at any time per Section 5);
- Legal & compliance — meeting tax obligations, responding to legal requests, enforcing our Service Agreement, and detecting fraud;
- Security — protecting our infrastructure and customer accounts from unauthorized access, abuse, or attack.
4. How We Share Your Information
We share information only as described here. We do not sell your personal information to third parties for monetary value, and we have not done so in the prior 12 months.
a. Service Providers
We share information with third-party vendors who help us operate the Service. These providers are contractually limited to using your information only for the purposes we authorize. Current providers include:
| Provider | Purpose | Info Shared |
|---|---|---|
| Stripe | Payment processing | Billing info, card details, transaction history |
| Twilio | WhatsApp message delivery | Phone numbers, message content, delivery receipts |
| Lovable / Hosting | Site building & hosting | Customer Content, technical site data |
| Google (Workspace, Analytics) | Email, productivity, analytics | Communications, usage data |
| Tally / Form builder | Intake form management | Form responses, file uploads |
| Airtable | Customer record management | Account info, build status |
| Domain registrars | Domain registration | Domain name, registration contact info |
| Meta (Facebook/Instagram) | Marketing analytics | Aggregated conversion data |
b. Legal Disclosures
We may disclose your information if required by law, subpoena, or court order; to protect the rights, property, or safety of Vertacomai, our customers, or the public; or in connection with the investigation of suspected fraud or violations of our Service Agreement.
c. Business Transfers
If Vertacomai LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or WhatsApp before your information becomes subject to a different privacy policy.
d. With Your Consent
We may share your information for other purposes only with your explicit consent.
5. Your Rights & Choices
You have the following rights regarding your information, regardless of where you live. Some rights are guaranteed by specific state or country laws — see Section 11 for state-specific details.
a. Access
You can request a copy of the personal information we have about you. We will respond within 30 days.
b. Correction
You can ask us to correct information that's inaccurate or incomplete. Most account info can be updated via your Stripe Customer Portal or by emailing us.
c. Deletion
You can request deletion of your personal information. We will delete it within 30 days, except information we're required to retain for legal, tax, or contractual reasons (e.g., billing records for 7 years per tax law).
d. Marketing Opt-Out
You can opt out of marketing emails by clicking the unsubscribe link in any marketing message or by emailing privacy@webcontesta.com. Transactional emails (build updates, payment receipts, support responses) cannot be opted out of while you have an active subscription.
e. Data Portability
You can request your data in a portable, machine-readable format. We provide JSON or CSV exports of account data.
f. Withdraw Consent
Where we rely on your consent (e.g., marketing emails), you can withdraw it at any time. Withdrawing consent doesn't affect the lawfulness of processing before withdrawal.
To exercise any of these rights, contact privacy@webcontesta.com. We may need to verify your identity before fulfilling certain requests.
6. Cookies & Tracking Technologies
We use cookies and similar technologies on the Site. A "cookie" is a small file stored on your device that lets websites remember information about your visit.
Types of Cookies We Use
- Essential cookies — required for the Site to function (login state, form data preservation, security)
- Analytics cookies — help us understand how visitors use the Site (Google Analytics)
- Marketing cookies — used for conversion tracking and remarketing (Meta Pixel)
- Preference cookies — remember your language toggle (EN/ES) and other settings
Your Cookie Choices
Most browsers let you control cookies through their settings. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-Out Browser Add-On. Blocking essential cookies may prevent the Site from working correctly.
Do Not Track Signals
Our Site does not currently respond to "Do Not Track" browser signals because there is no industry-wide standard for how to interpret them. We treat all visitors consistently regardless of DNT settings.
7. Data Retention
We retain your information for as long as we need it to provide the Service and meet legal obligations:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active customer account data | Duration of subscription + 30 days | Service delivery |
| Billing & tax records | 7 years after final transaction | Tax law requirements |
| Service Agreement records | 7 years after termination | Contract enforcement, statute of limitations |
| Marketing email subscribers | Until unsubscribe + 30 days | Marketing operations |
| Support communications | 3 years after resolution | Quality assurance, dispute resolution |
| Site analytics (aggregated) | 26 months | Service improvement |
| Site analytics (individual) | 14 months | User research |
| Cookies | Per cookie policy (typically 1–24 months) | Site functionality |
After retention periods expire, we either delete the data or anonymize it so it can no longer identify you.
8. How We Protect Your Information
We implement reasonable administrative, technical, and physical safeguards designed to protect your information, including:
- Encryption in transit (TLS/SSL) for all data sent between your device and our servers
- Encryption at rest for sensitive data stored in our databases
- Access controls — only authorized team members can access customer data, and access is logged
- Regular security reviews and infrastructure updates
- Vendor due diligence before granting third-party providers access to data
- Incident response procedures aligned with the NY SHIELD Act requirements
No security system is perfect. While we work hard to protect your information, we cannot guarantee its absolute security. If we discover a security incident affecting your personal information, we will notify you and applicable authorities as required by law, typically within 72 hours of discovery.
9. Children's Privacy
The WebContesta Service is intended for businesses, not consumers, and is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, please contact privacy@webcontesta.com and we will delete it promptly.
For customers in jurisdictions where the age threshold is different (e.g., 16 in some EU countries), we do not knowingly collect information from anyone under that local age threshold.
10. International Data Transfers
Vertacomai is based in the United States, and our service providers may be located in the U.S., Colombia (operations team), and other countries. If you are located outside the U.S., your information will be transferred to and processed in countries that may have different data protection laws than your country.
By using the Service, you consent to this transfer. We take reasonable steps to ensure your information receives an adequate level of protection wherever it is processed, including through standard contractual clauses with international service providers.
11. State-Specific Privacy Rights
a. California Residents (CCPA / CPRA)
If you are a California resident, you have additional rights:
- Right to know what personal information we collect, use, disclose, and sell
- Right to delete personal information (with some exceptions)
- Right to correct inaccurate personal information
- Right to opt out of the "sale" or "sharing" of personal information (Note: we do not sell personal information)
- Right to limit use of sensitive personal information
- Right to non-discrimination — we won't deny service or charge different prices for exercising your rights
To exercise these rights, email privacy@webcontesta.com with the subject line "California Privacy Request." We may ask for information to verify your identity. You can also designate an authorized agent to make requests on your behalf.
b. New York Residents
New York's SHIELD Act applies to all New York residents' personal information handled by Vertacomai. We implement reasonable safeguards as described in Section 8 and will notify you of any data breach affecting your information per NY notification requirements.
c. Other States
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with comprehensive privacy laws have similar rights to access, delete, correct, and opt out of certain processing. To exercise these rights, contact privacy@webcontesta.com.
d. EU/UK Residents (Limited Exposure)
If you are an EU or UK resident interacting with us, you have rights under GDPR/UK GDPR including access, rectification, erasure, restriction of processing, data portability, and objection. The legal basis for our processing is typically contract performance (delivering the Service), legitimate interest (improving the Service), or consent (marketing). Contact privacy@webcontesta.com to exercise these rights or to lodge a complaint with your local data protection authority.
12. Email Communications (CAN-SPAM)
Vertacomai complies with the U.S. CAN-SPAM Act. Marketing emails will:
- Clearly identify Vertacomai as the sender
- Use truthful subject lines that accurately describe the content
- Include our physical business address
- Include a working unsubscribe link in every email
- Honor unsubscribe requests within 10 business days
Transactional emails (build updates, payment receipts, support responses) are not considered marketing and cannot be opted out of while you have an active subscription. If you cancel your subscription, transactional emails stop automatically.
13. Third-Party Sites & Links
The Site may contain links to third-party websites — for example, AutoContesta, Vertacomai Launchpad, customer websites we've built, or vendor portals like Stripe. We are not responsible for the privacy practices of these third-party sites. We encourage you to read their privacy policies before providing any personal information.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other reasons. When we make material changes, we will post the updated Policy on this page with a new "Last Updated" date and notify active customers via email or WhatsApp.
15. Contact Us
For questions, concerns, or requests related to this Privacy Policy, contact us:
We respond to all privacy inquiries within 30 days. If you're not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or consumer protection office.
Spanish version available upon request via WhatsApp. English version governs in case of conflict.