Privacy Policy | VTag.ID

PRIVACY POLICY

VTag.id NFC Services

Last Updated: 1/4/2026

1. INTRODUCTION

VTag.id ('we,' 'our,' or 'us'), also known as VTag Arts, is a startup company providing NFC (Near Field Communication) tag services and hosting solutions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, purchase our products, or use our services.

IMPORTANT: As a startup company, our services, policies, and business operations may change. We are committed to providing the best possible service, but users should understand that service availability and continuation are not guaranteed.

2. INFORMATION WE COLLECT

2.1 Personal Information

We collect information you voluntarily provide when creating an account, making purchases, or using our services, including: name, email address, phone number, billing/shipping addresses, account credentials and profile information, information you choose to store on your NFC tags, customer service communications, and subscription and billing information.

2.2 NFC Tag Content

We store the information you choose to put on your NFC tags, including but not limited to contact information, emergency contact details, pet information, business details, social media links, and any other data you configure. This information is stored on our servers to enable tag functionality.

2.3 Automatic Information

We automatically collect certain information when you use our services, including device information, IP address, browser type, usage patterns, and tag scan analytics.

3. HOW WE USE YOUR INFORMATION

We use your information for: providing and maintaining our NFC tag services, processing transactions and managing subscriptions, communicating with you about our services, improving our products and services, complying with legal obligations, and internal business purposes including analytics and marketing.

3.1 Marketing and Promotional Use

We may use your personal information for our own marketing, promotional, and business development purposes. This includes creating aggregated data, case studies (with anonymized information), and promotional materials. We do not sell your personal information to third parties.

4. INFORMATION SHARING AND DISCLOSURE

4.1 No Sale of Personal Information

We DO NOT sell, trade, or rent your personal information to third parties.

4.2 Service Providers

We may share information with trusted service providers who help us operate our business, including payment processors, hosting providers (AWS), and customer service tools.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. DATA STORAGE AND SECURITY

5.1 Storage Location

Your data is stored on Amazon Web Services (AWS) servers located in the United States. We use industry-standard security measures to protect your information.

5.2 Payment Information

We DO NOT store your payment card information on our servers. Payment processing is handled by third-party payment processors (such as PayPal) who maintain their own security standards and privacy policies.

5.3 Public Information

Information you choose to make publicly accessible through your NFC tags is, by its nature, public information. Anyone who scans your NFC tag can access the information you have configured to be displayed. You are responsible for determining what information to make publicly accessible. Depending on the SEO/visibility settings you choose, this page and the information you publish on it may also be indexed by and discoverable through search engines.

6. YOUR RIGHTS AND CHOICES

You have the right to: access and review your personal information, update or correct your information, delete your account and associated data, opt out of marketing communications, and request a copy of your data.

7. CALIFORNIA RESIDENTS

California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. You may request disclosure of the categories and specific pieces of personal information we have collected about you.

8. DATA DELETION AND RETENTION 8.1

User Account Deletion You have the right to delete your account and request removal of your personal data at any time. To delete your account:

Log in to your account dashboard
Navigate to Account Settings
Select "Delete Account
Confirm your deletion request

8.2 Data Removal Upon Account Deletion

When you delete your account, we will:

Remove your name and address from our systems
Delete all NFC tag configurations and content you created
Remove your profile information and preferences
Deactivate your NFC tags (they will no longer function)

8.3 Data Retained for Fraud Prevention

To prevent abuse and protect our services, we retain certain information after account deletion:

Email addresses (disassociated from personal information)
Phone numbers (disassociated from personal information)
Account verification records
Transaction history for legal/tax compliance

This retained information is stored separately and cannot be linked back to your personal identity. It is used solely to:

Prevent banned users from creating new accounts with the same contact information
Detect patterns of abuse or fraudulent activity
Comply with legal obligations for financial records

8.4 Data Retention Period

Personal information (name, address, profile data): Deleted immediately upon account deletion
Retained verification data (email, phone): Kept indefinitely for fraud prevention
Transaction records: Retained for 7 years as required by law
Usage logs and analytics: Anonymized within 90 days

8.5 California Privacy Rights (CCPA)

California residents have additional rights regarding personal information:

Right to know what personal information we collect and how it's used
- Right to delete personal information (subject to fraud prevention exceptions above)
Right to opt-out of sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights. To exercise your California privacy rights, contact us at support@vtag.id

8.6 Third-Party Platform Integration

If you connect your VTag.id account to third-party platforms (such as social media), please note:

We do not control those platforms' data practices
You should review their privacy policies separately
Deleting your VTag.id account does not automatically delete data on connected platforms
You must separately manage your data on each connected platform

9. CHANGES TO THIS POLICY

We reserve the right to modify this Privacy Policy at any time. Changes will be effective immediately upon posting to our website. We will notify you of material changes via email to the address associated with your account. Your continued use of our services after any changes constitutes acceptance of the updated policy.

PURCHASE SURVEYS (GOOGLE CUSTOMER REVIEWS)

If you make a purchase, we share your email address, order number, and delivery details with Google LLC so it can offer you the optional Google Customer Reviews survey about your purchase experience. Participation is voluntary, and Google's Privacy Policy applies to information you provide to Google.

GOOGLE BUSINESS PROFILE (ONLY IF YOU CONNECT IT)

If you press Continue with Google to show your Google rating on your VTag.ID page, you sign in with Google and allow us to access your Google Business Profile. We use that access only to list the businesses your Google account manages so you can pick yours (that list is deleted within 15 minutes), and to read that business's name, address, map link, star rating, review count and newest reviews, so we can show your rating on your page and in our business directory. We never create, change or delete anything on your Google Business Profile, and we never reply to reviews.

We store the access Google gives us in encrypted form. We keep your current rating and review count, refreshed daily, and delete them within 30 days if we can no longer refresh them. Reviews themselves are kept for no more than 24 hours. We do not sell this information, share it with anyone else, or use it for advertising.

You can remove our access at any time with the Disconnect button in your tag's Manage panel, or in your Google Account under Security. Disconnecting, removing the tag from your account, or deleting your account deletes the stored access. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

SUBSCRIBING TO A BUSINESS ON VTAG

When you press Subscribe on a business's VTag page, you join that business's list. If you subscribe with your email address and do not have a VTag account yet, confirming the code we email you creates a free VTag account for that address; you can add a password later, or sign in with Google or another service that uses the same address. The business sees your name, your email address and the date you subscribed, and can email you from its own email account or download its list. If you subscribed while our wording said the business would not see your email address, it still sees your name only. When a business emails you from its own account, that email comes from the business, not from VTag: it must include its postal address and a way to unsubscribe, and stop emailing you when you unsubscribe or ask it to. We keep a record of your consent (the wording you saw, the date and time, your internet address and browser, and how you confirmed) so we can show you agreed. If you never confirm, we delete the sign-up after 7 days. If you unsubscribe, we tell the business, so it stops emailing you, delete the subscription after 30 days and keep only a coded (hashed) copy of your address, so that business cannot email you again through VTag by mistake. We use your subscription only to deliver that business's updates and our own confirmation and unsubscribe messages. We never sell it, and we share your name and email address only with the business you subscribed to. You can unsubscribe from one business on its page or in your VTag account under Contacts, where you can also unsubscribe from all of them at once, or ask us to remove your address everywhere (support@vtag.id). Deleting your VTag account ends all your subscriptions. If someone typed your address without asking you, nothing happens unless the code or the button in our email is used, and "Stop these emails" in that email stops subscription emails to your address from every business on VTag.

GOOGLE CALENDAR (ONLY IF YOU CONNECT IT)

If you take bookings on VTag.ID, you can connect your Google Calendar in Manage > Booking > Settings > Calendar app. Google then asks you to allow two things, and you can allow either one:

See when you are busy. About once a minute we read the start and end times of the busy periods in your main Google calendar, for the days customers can book ahead. We never read the titles, places, descriptions, guests or any other details of your events. We use these times for one thing only: so customers cannot book a time when you are busy. We keep them while your calendar is connected and replace them each time we read them again.
Add your bookings to Google. We create a separate calendar called "VTag bookings" in your Google account, and add, change and remove your bookings in it. Each entry holds the customer's first name, the service, the time and a link to your bookings. We do not change any other calendar.

We also see the email address of the Google account you connect, so we can show you which account is connected. We also keep the ID number Google gives that Google account, only to tell whether another VTag page is connected to the same Google account, so that disconnecting one page does not disconnect the other.

Your Google sign-in is stored encrypted, on a server that is not our public website, and is used only by our system for the two things above. No person at VTag.ID looks at your calendar data unless you ask us to help with a problem or the law requires it. We do not sell this data, use it for advertising, or share it with anyone.

You can disconnect at any time in the same place. That stops all access, removes the "VTag bookings" calendar from your Google account, and deletes the busy times and the sign-in we kept. You can also remove our access in your Google Account settings at any time.

VTag.ID's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

10. CONTACT US

For questions about this Privacy Policy, please contact us at: support@vtag.id