Privacy Policy

Effective September 26, 2026

Vyper Performance is operated by SOMOS MILLIONAIRES S.A.S. in Colombia. This policy describes how we handle personal data in the website and application. For account and service operations, we determine the purposes of processing. A customer company determines which sales and other business data it connects to Vyper; we process that information to provide the service on its behalf, subject to the customer's instructions and applicable law.

1. Data we handle

• Account and support information, such as email address, company name, user role, messages, and authentication records.
• Connected-service information, such as Meta account and campaign identifiers, permissions, configuration, and access credentials.
• Sales information sent by customer-configured sources, which may include order identifiers, dates, amounts, currency, product, advertising identifiers, and customer or business telephone numbers.
• Technical and security information, such as session cookies, IP address, request and error logs, and actions needed to protect and operate the service.
• When paid subscriptions become available, limited billing identifiers and subscription status received from the payment provider. Vyper does not need to store full payment-card numbers.

Customers should not send sensitive personal data or payment-card details through sales webhooks unless a separate lawful arrangement expressly permits it.

2. Why we use data

We use data to create and secure accounts, receive sales events, connect authorized services, display performance reports, provide support, diagnose incidents, prevent misuse, meet legal obligations, and communicate material service changes. We do not sell customer sales data.

3. Sources and service providers

Data comes from users, their company, authorized Meta connections, and sales systems they configure. Infrastructure providers include Supabase for authentication and data services and Vercel for application hosting. Email delivery and connected integrations may also process the limited information needed for their function. If paid checkout is introduced, Paddle will process buyer payment information under its own buyer terms and privacy notice. Some processing may occur outside Colombia, subject to the applicable contractual and legal safeguards.

4. Retention and account closure

We retain account and business data while the company uses Vyper and for as long as needed for the purposes above, security, dispute handling, and applicable legal duties. There is currently no automated deletion based on payment status. A company owner may request closure or deletion through the contact below. We verify the request and remove data we no longer need to retain; backup copies expire through their normal rotation rather than instantly.

5. Security and cookies

We use access controls, tenant-scoped authorization, secure transport, and operational monitoring to protect the service. No online service is risk-free. Authentication and session cookies are necessary to keep users signed in and protect accounts; local browser storage may remember display preferences such as the selected theme.

6. Your rights and requests

Depending on applicable law, you may ask to access, update, correct, or delete your personal data, request information about its use, or withdraw an authorization where permitted. Send a request to vyperperformance01@gmail.com. Include enough detail to identify the account and the data concerned; we may verify your identity or direct a request about a customer company's sales data to that company. We will handle requests within applicable legal timeframes. Colombian data subjects may also contact the Superintendencia de Industria y Comercio where the law allows.

7. Contact and updates

Data controller: SOMOS MILLIONAIRES S.A.S. Address: Carrera 33A 72 Sur 184, Sabaneta, Antioquia, Colombia. Telephone: +57 304 583 9907. Public support and privacy contact: vyperperformance01@gmail.com.

We may update this policy when processing changes. Material changes will be communicated before they take effect where required. This version applies from the date above.