GDPR — Your rights de privacidad
1. Scope of application
This document describes the rights that the General Data Protection Regulation (GDPR — EU Regulation 2016/679) grants to individuals located in the European Economic Area (EEA) regarding the processing of their personal data by VuraOs LLC.
Although VuraOs LLC is incorporated in Wyoming, USA, we commit to respecting the principles of the GDPR for all our users, regardless of their geographic location.
2. Responsable del tratamiento
VuraOs LLC
30 N Gould St, Ste R, Sheridan, WY 82801, USA
Contacto de privacidad: privacy@vuraos.com
Para relaciones B2B y acuerdos de procesamiento firmados: Data Processing Agreement (DPA)
3. Legal basis for processing
We process each category of personal data under the most appropriate legal basis according to the GDPR:
| Actividad de tratamiento | Base legal | Art. GDPR |
|---|---|---|
| Provision of the VURAOS platform services | Contrato | 6.1.b |
| Facturación y gestión de suscripciones | Contrato | 6.1.b |
| Technical support and customer service | Contrato | 6.1.b |
| Product improvement and anonymized usage analytics | Legitimate interest | 6.1.f |
| Fraud prevention and platform security | Legitimate interest | 6.1.f |
| Comunicaciones de marketing y novedades del producto | Consentimiento | 6.1.a |
| Retention of accounting and tax records | Legal obligation | 6.1.c |
You can withdraw your consent for marketing communications at any time via the unsubscribe link in each email or by sending a message to privacy@vuraos.com.
4. Your rights bajo el GDPR
Right to access
You can request a copy of the personal data we hold about you and how we use it.
Right to rectification
You can request the correction of inaccurate data or the completion of incomplete data.
Right to erasure
You can request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
Right to portability
You can receive your data in a structured, machine-readable format to transfer to another provider.
Right to object
You can object to the processing of your data for direct marketing purposes or based on legitimate interest.
Derecho de limitación
You can request that we restrict the processing of your data while we resolve a dispute or verify its accuracy.
5. How to exercise your rights
To exercise any of these rights, send a request to privacy@vuraos.com con el asunto "Solicitud GDPR" indicando:
- The right you want to exercise (access, erasure, portability, etc.)
- Your email address registered in VURAOS
- Una descripción breve de tu solicitud
We respond to all requests within 30 business days following receipt. In cases of greater complexity we may extend this period up to 90 days, notifying you accordingly.
6. Data retention
We retain your personal data only for the time necessary to fulfill the indicated purposes. The following table summarizes the retention periods by category:
| Data category | Retention period | Motivo |
|---|---|---|
| Datos de cuenta (nombre, email) | Duración de la relación + 90 days | Contract management |
| Registros de facturación y pagos | 7 years from the transaction | Obligación fiscal / contable |
| Logs de actividad de la plataforma | 12 meses | Seguridad y auditoría |
| Conversaciones de soporte | 3 years from ticket closure | Calidad de servicio |
| Datos de análisis (anonimizados) | 26 meses (GA4 por defecto) | Mejora del producto |
| Consentimientos de marketing | Hasta revocación + 3 years | Prueba de consentimiento |
When the contractual relationship ends, we delete or anonymize account data within 90 days following the request, unless required by law to retain it.
7. International transfers de datos
VuraOs LLC is based in the United States. By using our platform, data may be transferred and processed outside the EEA. We guarantee that these transfers are carried out with adequate safeguards:
- Standard Contractual Clauses (SCC) approved by the European Commission (Implementing Decision EU 2021/914).
- Marco de Privacidad de Datos UE-EE.UU. (DPF) para los proveedores certificados bajo dicho marco.
- Evaluaciones de impacto de transferencia (TIA) realizadas para cada subprocesador relevante.
You can view the full list of subprocessors and applied safeguards in our Data Processing Agreement.
8. Subprocesadores
Para prestar los servicios de VURAOS trabajamos con los siguientes subprocesadores principales que pueden tratar datos personales en tu nombre:
| Proveedor | Service | Processing country |
|---|---|---|
| Supabase Inc. | Database, authentication, storage | EE.UU. (AWS us-east-1) |
| Amazon Web Services | Infraestructura cloud (via Supabase) | EE.UU. |
| Stripe Inc. | Processing de pagos | EE.UU. / EEE |
| Google LLC | Analytics (datos anonimizados), Tag Manager | EE.UU. |
| ElevenLabs Inc. | AI voice synthesis | EE.UU. |
For the full list of subprocessors with detailed guarantees, see the DPA completo. Enterprise Customers can request prior notification of changes to subprocessors.
9. Derecho a reclamar ante una autoridad supervisora
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the data protection authority of your country of residence, without prejudice to any other administrative or judicial remedy.
- Spain: Agencia Española de Protección de Datos (AEPD)
- European Union: la autoridad supervisora de tu Estado miembro de residencia.
- Argentina: Agencia de Acceso a la Información Pública (AAIP)
Te alentamos a contactarnos primero en privacy@vuraos.com so we can address any concern directly.
10. Data Processing Agreement (DPA)
If you use VURAOS in a business context and process personal data of your customers or employees through our platform, you can request the signing of a bilateral Data Processing Agreement (DPA).
The VURAOS DPA describes in detail the obligations of each party, the technical and organizational security measures, and the conditions for processing data on behalf of the controller. Ver DPA completo →