Privacy Policy Last updated: July 8th, 2018 Privacy is important to Vanlo. We offer a software platform and services for helping run a business. We collect data about businesses and their customers (“Data”) when they use the platform, the services, and our websites (collectively, “Services”). This privacy policy describes how we collect, use and disclose Data. In this privacy policy, we refer to a user of one or more of our Services as "User", and customers of our users as "Customer". If you disagree with the practices described in this policy, you should (a) take the necessary steps to remove cookies from your computer after leaving our website, and (b) discontinue your use of our Services. Data Controller and Owner Vanlo Corporation - San Francisco, CA 94104 - privacy@vanlo.com Types of Data Collected a. Personal Data: Data that identifies, or that could reasonably be used to identify, our User as an individual, or our User's Customer as an individual, is considered "Personal Data". We collect Personal Data when a User registers for an Vanlo account, and when a User sends us Customer Data. The Personal Data we collect includes contact details such as name, email address, phone number, and address. Other Personal Data collected may be described in other sections of this Privacy Policy or by dedicated explanation text contextually with the Data collection. b. Other Data: Data other than Personal Data is considered "Other Data". We collect Other Data through a variety of sources. One source for Other Data is Cookies and technologies that record Data about the use of our websites, and the use of our Services generally. Other Data that we may collect include: browser and device data, transaction data, Cookie and tracking technology data, and authorized third party account data. Use of Collected Data a. Personal Data: We use Personal Data to: provide the Services, contact the User, authenticate the User, handle payments, respond to inquiries, send service notices, and provide customer support. b. Other Data: We may use Other Data for a range of different purposes, provided we comply with applicable law and our contractual commitments. In some countries (for example, European Economic Area countries), local legal regimes may require us to treat some or all of Other Data as “Personal Data” under applicable data protection laws. Where this is the case, we will process Other Data only for the same purposes as Personal Data under this privacy policy. Method of Processing The Data Controller processes the Data of Users in proper manner and shall take appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data. The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Data Controller, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of the site (administration, sales, marketing, legal, system administration) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Data Controller at any time. Place The Data is processed at the Data Controller headquarters, unless stated otherwise, and by third party data centers in the US. Data Retention Time The Data is kept for the longer of the time necessary to provide the service requested by the User, as stated by the purposes outlined in this document. The User can always request the Data Controller for their suspension or removal. Legal Action The User's Personal Data may be used for legal purposes by the Data Controller, in Court or in the stages leading to possible legal action arising from improper use of Vanlo or the Services. Additional Information about User's Personal Data In addition to the information in this privacy policy, we may provide the User with contextual information concerning particular services or the collection and processing of Personal Data. System Logs and Maintenance For operation and maintenance purposes, we may collect files that record interaction with the Service (System Logs) or use for this purpose other Personal Data (such as IP Address). Information not contained in this policy More details concerning the collection or processing of Personal Data may be requested from the Data Controller at any time at its contact information. The Rights of Users Users have the right, at any time, to know whether their Personal Data has been stored and can consult the Data Controller to learn about their contents and origin, to verify their accuracy or to ask for them to be supplemented, canceled, updated or corrected. Provider (Vanlo) will make such changes to the degree that it is technically feasible but offers no guarantee of deletion or amendment for any data held by the Service. Requests should be sent to the Data Controller at the contact information set out above. Vanlo does not support “do not track” requests. To understand if any of the third party services it uses honor the “do not track” requests, please read their privacy policies. Vanlo as a Data Processor We may collect, use and disclose certain Personal Data about Customers when acting as the User’s service provider. Our Users are responsible for making sure that the Customer’s privacy rights are respected, including ensuring appropriate disclosures about third party data collection and use. To the extent that we are acting as a User’s data processor, we will process Personal Data in accordance with the terms of our agreement with the User and the User’s lawful instructions. Privacy Shield Certification If a User or Customer is located in the EEA or Switzerland, we comply with applicable laws to provide an adequate level of data protection for the transfer of Personal Data. Vanlo is in the process of certifying under the EU-U.S. and the Swiss-U.S. Privacy Shield Framework. Changes The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to its Users on this page. It is strongly recommended to check this page often, referring to the date of the last update listed at the top. If a User objects to any of the changes to the Policy, the User must cease using the Services and can request the Data Controller to erase the Personal Data. Unless stated otherwise, the then-current privacy policy applies to all Personal Data the Data Controller has about Users. Refunds All remaining balances on your account are 100% refundable for up to 90 days from the initial transaction. If you would like to initialize a refund please contact us at support@vanlo.com. Cancellation Feel free to cancel your account at anytime. There are no long term obligations and you will only be charged for the services you have used. Any remaining balance in your account can be refunded by sending us an email at support@vanlo.com