GDPR & LGPD

1. Controller

Vimmac, Inc. acts as the data controller for personal data processed through the platform. For data protection inquiries, contact support@vimmac.com.

2. Legal bases for processing

We process personal data on the following legal bases:

• Performance of a contract — to provide the service you signed up for.
• Legitimate interests — security, fraud prevention, and product improvement with appropriate safeguards.
• Consent — non-essential cookies and certain marketing communications.
• Legal obligation — where processing is required by law.

3. Your rights (GDPR)

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten"), subject to legal exceptions.
• Restrict or object to certain processing.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, and lodge a complaint with a supervisory authority.

4. Your rights (LGPD)

If you are in Brazil, the LGPD gives you the right to confirm processing, access your data, correct it, anonymize or delete unnecessary data, request portability, obtain information about data sharing, and revoke consent.

5. International transfers

Vimmac may process data in the United States and other countries where our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect transfers.

6. Making a request

To exercise any of these rights, email support@vimmac.com. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.