This Third Party Affiliates Terms and Conditions was last updated on 31st May 2025.
This Third Party Affiliates Terms and Conditions was brought into effect on 31st May 2025.
This legal sub-document shall be known as "Privacy Policy" and it applies to the collection, storage, processing, use, disclosure, deletion, transfer, retrieval or retention of any and every information, data, records, logs, events or signals, that can be identified or regarded as Personal Information, relating to or attributable to the User, whether they be voluntarily provided by User, collected from him in accordance with the Terms of Use or generated during or as a consequence of access to the Site or the use of Site Services by User. This Privacy Policy explains how Vtex.AI collects, uses, discloses, processes, protects and retains any Personal Information that User provides Vtex.AI voluntarily or that Vtex.AI collects from User in accordance with the Terms of Use or that is generated during or as a consequence of access to the Site or the use of Site Services by User. Vtex.AI hereby declares that any and every Personal Information User voluntarily provides or is required to provide and is collected from User or is generated by User during or as a consequence of access to the Site or the use of the Site Services by User shall be subject to this Privacy Policy and such Personal Information shall be handled strictly in accordance with this Privacy Policy to the extent permitted by applicable law. This Privacy Policy lists the rights of User relating to his data and also describes the choices available to him regarding the use of his Personal Information and how he can update such Personal Information. User is therefore advised and recommended to carefully read and understand this Privacy Policy fully before proceeding to access the Site and/or avail Site Services.
This Privacy Policy contains key terms which are defined as follows and key terms not defined hereinbelow but defined in the User Agreement or other legal sub-documents within the Terms of Use shall, unless they be repugnant to the subject or context, have the same meaning as they have in the User Agreement or such other legal sub-documents.
"Confidential Information" shall mean any information that User has provided or has agreed to provide to Vtex.AI or its third party affiliates, which User requires to be kept confidential for protecting the interests of User or as per the provisions of the User Agreement or of any separate agreement such as a non-disclosure agreement entered into by and between the parties in this behalf.
"data subject" shall mean any person, either a natural person or an association of persons or an entity recognised by law, whose rights pertaining to data and data related issues are directly affected by the matter in question arising from acts/omissions of Vtex.AI performed in accordance with the Terms of Use or the acts/omissions of its third party affiliates.
"effective date", as used in this Privacy Policy, shall mean the date (as per the Gregorian calendar only) on which this Privacy Policy or any provision thereof or any update of this Privacy Policy shall be or has been brought into effect and different provisions or updates may have different corresponding effective dates as may be specified in that behalf by Vtex.AI.
"handle", wherever appearing in the context of Personal Information or in connection therewith, shall mean the collection, storage, processing, use, disclosure, deletion, transfer, retrieval or retention of any and every information, data, records, logs, events or signals, that can be identified or regarded as Personal Information, relating to or attributable to the User, whether they be voluntarily provided by User or collected from him in accordance with the Terms of Use or generated during or as a consequence of access to the Site or the use of Site Services by User.
"Personal Information" shall mean information, data, records, logs, events or signals, that can be used to directly or indirectly identify a User, either from that information alone or from that information combined with any other information Vtex.AI or its third party affiliates have access to about User, save as otherwise specifically provided by the laws applicable to User.
"Personally Identifiable Information" shall mean such information, data, records, logs, events or signals, that cannot be classified as Personal Information and cannot be used on its own to identify a User, directly or indirectly but can be combined with other information available elsewhere, other than the databases of Vtex.AI or its third party affiliates to identify him, save as otherwise specifically provided by the laws applicable to User.
"retention period", in connection with retention of User's data, shall mean such period for which Vtex.AI shall preserve and keep data of the User for any purpose and includes purposes such as data analysis and statistical research, keeping records of payment transactions for tax-related purposes, providing required information to the police or any person or authority in charge of maintaining law and order, compliance with governmental regulations or procedures, enforcement of orders of any judicial court or quasi-judicial authority or fulfilling the request of User himself.
"Sensitive Information" shall mean such information, the disclosure, leak or compromise of which is capable of (i) causing prejudice to the legitimate interests of User; (ii) causing User loss, damage, harm or create any liability upon him; (iii) defiling his reputation in society; (iv) eroding his trust among his business partners, customers, employees, co-workers, or such other persons; or (v) threatening national security or integrity thereof, regardless of whether User specifies such information to be sensitive or not.
"substantial change" shall mean, in relation to the Privacy Policy, any update which modifies the purpose of handling of Personal Information and makes it inconsistent with the purpose for which it was originally collected.
Vtex.AI collects and stores certain information relating to User in accordance with this Privacy Policy. Some of the information is voluntarily provided by User and the rest is collected through his activity on the Site and interactions with customer support services or with the dedicated customer relationship manager and through feedback submitted by User. The information collected depends upon the context of interactions and choices made by User, including but not limited to, User's privacy settings, services and features accessed. Vtex.AI may also collect information relating to User from any interactions or through separate agreements in this behalf outside the Site or may also collect information from third parties.
Vtex.AI may collect or generate the following Personal Information from User at the time of registration upon the Site or as per requirement:
type of User – whether, a natural person, HUF (Hindu Undivided Family), legal entity, etc.;
name of User – including first and last name in case of Individual User and entity name in case of Corporate User;
date of birth/incorporation for natural persons or legal entities, as the case may be;
occupation in case of Individual User and business activity in case of Corporate User;
occupation in case of Individual User from medical profession, and healthcare related activity in case of Corporate healthcare professional;
email address of User;
Github id of the User;
username and password relating to the User Account;
address of User;
phone number;
name of the organization
role in the organization
country/region of the user
card data in case of payment services providers and others;
details such as subscription plans, orders, status;
identity cards of any type and issued by any authority and information contained therein;
certificates and/or legal documents issued by any governmental authority such as certificate of incorporation, tax-related documentation, death certificate etc.
information provided by social media accounts or other online platforms linked to the User Account, including but not limited to details shared when using social login methods such as Gmail, X (formerly Twitter), or LinkedIn during the registration or sign-in process.
information submitted to or collected by a dedicated customer relationship manager or customer support services; and
such other data as may be specified in this behalf.
The above information may be updated by User from time to time in the records of Vtex.AI as per need and availability.
This type of information is automatically collected by the Site every time User visits the Site regardless of whether he logs into his User Account or not. Such information may include technical information about User's visit and about his User Activity such as, products searched and viewed, page response times, download and web page loading errors, web page interaction information (mouse clicking, scrolling or hovering, finger tapping, etc.), duration of visit to a web page, interactions with advertisements hosted on the Site, methods used to browse away and to the web pages and methods used to contact the customer support services. Vtex.AI may collect automatically through the system, the following Personally Identifiable Information:
specifications of User's device or SIM-related information such as details of basic hardware, operating system, display screen, device manufacturer, cellular network operator, connection type and such other details as are commonly collected;
specifications of the software installed upon such device such as operating system, web browser, etc.;
information relating to User's application usage such as app basic information, app version, app settings (region, language, time zone, font, etc.) and app status record (downloading, installing, updating, deleting, etc.);
information pertaining to User's visit to the Site, logging in and out of sessions, session time, etc.;
information generated when User accesses a particular service such as messages and ratings in customer support services;
location of User;
internet service provider details, IP addresses, user-specific information obtained through different types of cookies, etc.;
(viii) payment information including but not limited to credit card details, debit card information, bank account details, digital wallet credentials (such as Apple Pay, Google Pay), and other payment methods supported by Stripe® ; as well as social security numbers, country identification numbers, or protected health information;
such other data as may be specified.
In case permitted by law, Vtex.AI may collect information about User from third parties which may be affiliate business partners, agents or contractors such as payment service providers, advertising networks, search information and analytics providers. Such information may consist of, for example,
information about User that other parties may provide Vtex.AI such as User's delivery address when the parties receive a shipment order;
such other information as account information and usernames when user accesses the Site through third party websites and applications.
Vtex.AI may, in addition to the above types of data, also collect some Sensitive Information or Confidential Information from User whether it be required under a separate agreement in this behalf or by or under any applicable law. For example, any financial information collected from Corporate Users such as information contained in financial statements or relating to trade secrets or relating to the subject matter of non-disclosure agreements can be treated as Sensitive Information or Confidential Information for the purposes of this Terms of Use legal document.
Vtex.AI collects Personal Information, Personally Identifiable Information, Sensitive Information and Confidential Information from User for any or all of the following purposes:
providing Site Services: to create and enable operation of User Accounts, provide access to online and downloadable content and downloadable materials, activate and manage subscriptions, generate billing information for creating tax invoices, bills, payment receipts and for other payment-related purposes and to maintain records of User and User Activity;
improving Site Services and Site features and for personalization: to learn User's interests and preferences and accordingly, provide product or service recommendations, display personalised content and advertisements, and provide other customised features, content and services, to adapt the Site and Site Services in order to be able to cater to User's interests and preferences, and keep track of such preferences, and deliver content relevant to User's interests;
improving administrative and business practices and customer support services: to improve internal administration and business practices and to learn the demands of users in general and provide improved quality customer support services accordingly and technical support such as general troubleshooting, password resetting, rectifying deficiencies in services or for providing general assistance to User and for the purposes of building and improving customer relationship with the help of dedicated customer relationship manager;
research purposes or for data analysis: to use data for generating statistical reports and for data analysis and to provide such reports for historical, technical, economic or scientific research or processes;
conducting a test of skill or a game of chance: to conduct contests, sweepstakes, lotteries or lucky draws or similar events and generate records pertaining to the same and for declaring winners thereof;
marketing and promoting business: to organise marketing and promotional activities such as conducting marketing surveys and hosting marketing campaigns;
improving security: to improve Site security and prevent illegal or prohibited activity thereupon; to issue individual cautionary notices or warnings to the users, potential customers or Site visitors regarding aspects that may be in their best interest or to safeguard their rights and legitimate interests; to protect reputation of User and data subjects;
protection of minors: to safeguard minors and the rights of such minors;
fulfilling obligations towards third parties: to fulfil obligations towards affiliate third parties relating to their data requests pertaining to offering services;
sending communications: to send User general notices, warnings and requests, including payment requests; to serve legal notices, cease and desist notices, intellectual property infringement notices or miscellaneous notices; to send notices regarding updates to the Terms of Use;
legal compliances: to act in conformity with applicable law; to comply with governmental orders, regulations and advisories; to follow orders or directions of judicial courts, quasi-judicial authorities, local bodies and other institutions of public governance.
Here are more detailed examples on how Vtex.AI handles information (which may include Personal Information):
Processing purchase orders by User: Information related to e-commerce orders is used for processing the purchase orders and related after-sales services, including customer support services, re-delivery, cancellation of such purchase orders and refunds upon eligible purchase order cancellations. In addition, the order number generated subsequent to placing of such purchase orders shall be used to cross-check the order with the entitled User Account and his entitled device. Recipient information, including name, address, phone number and postal code will be used for intimating stage of order processing, delivery or communication purposes. User's registered email address is used to send him parcel tracking information. A list of purchased items is used for printing an invoice which enables User to see which items are included within the parcel. In case User is eligible to receive a non-cash award or prize, such User will be provided parcel tracking information though his registered email address.
Collecting user feedback: The feedback User chooses to provide is valuable in helping Vtex.AI make improvements to its products and services. To follow up on the feedback User has chosen to provide, Vtex.AI may correspond with User using the Personal Information that he has provided and keep records of such correspondence for customer grievance redressal, problem solving and improvement of Site and Site Services.
Sending notices: From time to time, Vtex.AI may use Personal Information to send important notices, such as notices about purchases, updates to its Terms of Use and cautionary notices. Since such information is critical to User's interaction with Vtex.AI, it is not recommended that User choose to refuse to receive such information.
Vtex.AI may combine this information with other information (including information across different services or devices such as computers, mobile phones, and other connected devices) to provide and improve Site Services and content. For example, Vtex.AI may use User Account details in all Site Services that require such User Account. Furthermore, in order to improve user experience and Site Services, while complying with relevant laws and regulations or with user consent, Vtex.AI may sort out information from different services or equipment from User or related to User to form a label, to provide suggestions, customised content, and personalised features. For example, using User's search history in the browser to recommend products or services which User might be interested in. And according to the reasons for the aforementioned combination and the requirements of applicable laws, Vtex.AI shall provide the User with specific control mechanisms for such combination. User is hereby expressly conferred upon the right to opt-out of receiving direct marketing from Vtex.AI, default selections or settings, automated decision-making, etc. In order to exercise these rights, User may contact Vtex.AI at legal@Vtex.AI or refer to the control mechanisms described in this Privacy Policy for each product.
Data Sharing (GDPR Compliance):
Vtex.AI is committed to protecting the privacy and personal data of its users and complies with all applicable data protection laws, including the General Data Protection Regulation (GDPR). Vtex.AI declares that it does not sell any Personal Information to third parties under any circumstances. However, Vtex.AI may share Personal Information with third parties as detailed below, strictly in accordance with this Privacy Policy and applicable legal requirements, to provide or improve Site Services, or as otherwise necessary for legitimate business purposes.
1. User Consent and Rights:
a) Explicit Consent: Vtex.AI will obtain the User's explicit consent before sharing their Personal Information with third parties, except where such sharing is necessary for the performance of a contract, compliance with a legal obligation, or other legitimate interests as permitted by GDPR. This includes the use of third-party service providers, such as Stripe®, which may process User's Personal Information to facilitate payment processing and other related services. While Vtex.AI makes reasonable efforts to ensure that these third-party providers comply with GDPR, Vtex.AI does not have direct control over their data processing practices. Consent will be obtained in a clear and accessible manner, ensuring that the User is fully informed about the scope and purpose of data sharing, including any involvement of third-party service providers. Users are encouraged to review the privacy policies of such third parties to understand how their Personal Information may be handled
b) Right to Withdraw Consent: Users have the right to withdraw their consent at any time. Upon withdrawal of consent, Vtex.AI will cease processing the User's Personal Information for the purposes originally consented to, unless there is a legal basis for continued processing.
c) Right to Object: Users have the right to object to the processing of their Personal Information, particularly in relation to direct marketing. Vtex.AI will respect the User's right to object and will take appropriate action to cease such processing unless there are compelling legitimate grounds for processing that override the User's interests, rights, and freedoms.
d) Right to Access and Rectification: Users have the right to access their Personal Information held by Vtex.AI and to request the correction of any inaccurate or incomplete data.
e) Right to Erasure: Users have the right to request the erasure of their Personal Information, also known as the "right to be forgotten," under circumstances specified by GDPR, such as when the data is no longer necessary for the purposes for which it was collected, or when the User withdraws consent.
f) Right to Data Portability: Users have the right to receive their Personal Information in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible, under circumstances specified by GDPR.
2. Sharing of Personal Information:
a) User-Initiated Sharing: With the User's explicit consent or at their request, Vtex.AI will share Personal Information within the scope of the User's consent or request with specific third parties designated by the User.
b) Business Operations and Service Provision: To conduct business operations and provide the promised Site Services, Vtex.AI may share Personal Information with third parties within its business network, including affiliate service providers and business partners. Such sharing will be strictly limited to what is necessary to fulfill contractual obligations or for legitimate business interests.
c) Data Processing Agreements (DPAs): Vtex.AI endeavors to ensure that all third parties processing Personal Information on its behalf, including but not limited to service providers such as Stripe, WordPress, TutorLMS etc, implement appropriate measures to comply with GDPR. While Vtex.AI utilizes these third-party tools and assumes they are taking necessary GDPR measures, it may not have specific Data Processing Agreements with all such providers. Vtex.AI expects these third parties to process Personal Information in accordance with applicable data protection laws and to implement appropriate technical and organizational measures to safeguard such data. Furthermore, Vtex.AI encourages Users to review the privacy practices of these third-party providers to understand how their Personal Information may be handled.
d) Affiliate Service Providers and Business Partners: Vtex.AI may share Personal Information with its affiliate service providers and business partners, such as delivery services, data centers, customer service providers, and marketing services. Vtex.AI guarantees that such sharing is for legitimate, specific, and explicit purposes necessary to provide the Site Services. These third parties are required to process Personal Information in accordance with GDPR and the specific terms outlined in their agreements with Vtex.AI.
e) Sub-Processors: In cases where third-party service providers engage sub-processors, Vtex.AI ensures that these sub-processors are contractually bound by similar GDPR-compliant obligations as the primary processors.
3. Data Security and Protection:
a) Technical and Organizational Measures: Vtex.AI has implemented robust technical and organizational measures to protect Personal Information against unauthorized access, loss, destruction, or alteration. These measures include SSL Certification, access controls, regular security assessments, and data minimization practices.
b) Data Breach Notification: In the unlikely event of a data breach that poses a risk to the User's rights and freedoms, Vtex.AI will notify the relevant data protection authority within 72 hours of becoming aware of the breach and will inform affected Users without undue delay.
4. Transparency and Purpose Limitation:
a) Purpose Specification: Vtex.AI processes Personal Information solely for legitimate, specific, and explicit purposes related to the registration process. Users are required to provide certain Personal Information necessary for registration, which is evident from the nature of the registration process itself. This information is essential for authenticating their identity and granting access to subscription plans, services, and video content. Users will also have access to relevant information regarding their rights concerning their Personal Information, including the right to access, rectify, or withdraw consent for its processing at any time.
b) Transparency: Vtex.AI is committed to transparency in its data processing activities. This Privacy Policy provides clear and comprehensive information about how Personal Information is collected, used, shared, and protected. Users will be promptly informed of any significant changes to this policy.
5. International Data Transfers:
a) Adequacy Decisions and Safeguards: In cases where Personal Information is transferred to third parties outside the European Economic Area (EEA), Vtex.AI ensures that such transfers are based on an adequacy decision by the European Commission or are subject to appropriate safeguards, such as Standard Contractual Clauses (SCCs) or Binding Corporate Rules (BCRs), in accordance with GDPR.
6. Non-Personal Data Sharing:
a) Aggregated and Anonymized Data: Vtex.AI may share non-personal data, such as aggregated or anonymized data, with third parties for performance measurement, analysis, promotions, or advertising purposes. Such data does not identify individual users and is shared in a manner that fully complies with GDPR.
Contact Information:
Users who have questions or concerns about this Privacy Policy or Vtex.AI's data processing practices are encouraged to contact Vtex.AI at legal@Vtex.AI. Vtex.AI is committed to addressing and resolving all inquiries and requests in a timely and transparent manner.
Legal and Regulatory Disclosures:
Vtex.AI may disclose Personal Information in the following circumstances, in strict accordance with GDPR and other applicable data protection laws:
Legal Obligations and Government Requests: Vtex.AI may disclose Personal Information when required to comply with legal obligations, such as in response to lawful requests from public authorities, including law enforcement or national security agencies, or when ordered by a judicial or quasi-judicial authority. Such disclosures will only be made when necessary and proportionate to meet the specific legal requirement.
National Security and Public Interest: If the disclosure of Personal Information is necessary for national security, law enforcement, or other matters of significant public interest, Vtex.AI may disclose the relevant information, provided that such disclosures comply with GDPR and are made only when absolutely necessary.
Enforcement of Terms and Protection of Interests: Vtex.AI may disclose Personal Information to enforce the terms of the User Agreement, protect its business interests, rights, assets, or services, or protect the safety and rights of other users. Such disclosures may also be made to detect, prevent, and address fraud, unauthorized use of services, violations of the Terms of Use, or other harmful or illegal activities.
Disclosure Without Consent: In certain situations permitted by applicable data protection laws, Vtex.AI may collect, use, or disclose Personal Information without the User's consent. This includes situations where disclosure is required by law, such as providing information to public or government agencies, or where necessary to prevent fraud or other harmful behaviors.
Professional Advisors: Vtex.AI may share Personal Information with its accountants, auditors, lawyers, or other professional advisors, but only when necessary for the provision of professional advice and in compliance with GDPR.
Corporate Transactions: In the event of an actual or potential sale, merger, acquisition, or other corporate restructuring, Vtex.AI may share Personal Information with investors, relevant third parties, or parties affected by the transaction. Any such sharing will be done in accordance with GDPR, and only to the extent necessary for the purposes of the transaction.
Third-Party (outside of those necessary for the Vtex.AI operation) Disclosures Authorized by User: Vtex.AI may share Personal Information with third parties if the User has provided explicit authorization for a specific disclosure. This sharing will be done in accordance with the scope and purpose of the User's authorization.
Vtex.AI shall not transfer Personal Information to any third party outside of those necessary for the Vtex.AI operation unless it has obtained the User's explicit, informed, and specific consent for the transfer. Such consent must be freely given, and the User shall be clearly informed of the purpose of the transfer.
In the event that Vtex.AI is involved in a merger, acquisition, or sale of all or part of its assets, Vtex.AI shall notify the User of any changes in the ownership, use, or control of their Personal Information via email and/or by posting a notice on the Site. The User shall be informed of their rights under GDPR, including the right to object to the processing or transfer of their Personal Information and the right to request its deletion. Should any transfer of Personal Information involve a transfer to a country outside the European Economic Area (EEA), Vtex.AI shall ensure that such transfers are subject to appropriate safeguards in accordance with GDPR, including but not limited to standard contractual clauses, binding corporate rules, or other legally recognized mechanisms to ensure the protection of Personal Information.
In addition to disclosing the name or username of the winner of any contest in a non-identifiable form, Vtex.AI will only publicly disclose Personal Information where it has obtained the User's explicit, informed, and specific consent for such disclosure, or where such disclosure is required by law, necessary to comply with legal obligations, or justified under GDPR on reasonable grounds. This may include compliance with laws and regulations, legal procedures, litigation, or requests from competent government authorities, judicial courts, quasi-judicial authorities, or other institutions of public governance. Vtex.AI shall ensure that any public disclosure of Personal Information is limited to the minimum necessary to fulfill the legal or legitimate purpose for which it is required
Vtex.AI' security safeguards:
Vtex.AI is committed towards keeping Personal Information secure. In order to prevent unauthorised access, disclosure or other similar risks, Vtex.AI has put in place all legally required physical, electronic and managerial procedures to safeguard and secure the information it collects on User's devices and on the Site. Vtex.AI shall ensure that it safeguards Personal Information in accordance with applicable laws. For example, when User accesses his User Account, email verification and such other means for better security and to prevent unauthorised access to User Account are put in place by Vtex.AI. When User sends or receives data from his device to Site servers, it is made sure that they are encrypted using TLS (Transport Layer Security) and other algorithms. All Personal Information is stored on secure servers, and protected in controlled facilities. Vtex.AI classifies Personal Information based on importance and sensitivity, and ensures that the Personal Information has the required level of security.
Vtex.AI leverages third-party web platforms—Vercel®, GoDaddy®, and Digitalocean Corp®—for its website development, data storage, and processing needs. The privacy policies and legal terms for these platforms can be accessed via their respective websites: Vercel at vercel.com/legal/privacy-policy, GoDaddy at https://www.godaddy.com/en-in/legal/agreements, and render at https://render.com/terms. WordPress, hosted on GoDaddy, is equipped with advanced access controls for cloud-based data storage. In addition, GoDaddy routinely evaluates its data collection, storage, and processing practices, including implementing physical security measures, to protect against unauthorized access and misuse. Vtex.AI conducts due diligence on business partners and third party service providers to make sure that they are able to protect Personal Information. For instance, details of data protection at GoDaddy® platform is available https://GoDaddy.com. It also checks that appropriate security standards are maintained by such third parties by putting in place appropriate contractual restrictions, and where necessary, carrying out audits and assessments. In addition, its employees and those of our business partners and third party service providers who access Personal Information are subject to enforceable contractual obligations of confidentiality and non-disclosure.
Vtex.AI conducts security and privacy protection awareness sessions and tests to enhance its employee awareness of the importance of protecting Personal Information. It shall take all practicable and legally required steps to safeguard Personal Information. However, User should be aware that the use of the internet is not entirely secure and for this reason Vtex.AI cannot guarantee the security or integrity of any Personal Information when transferred from or to User via the Internet. Vtex.AI handles personal data breaches as required by applicable data protection law which includes, where required, notifying the breach to the relevant data protection supervisory authority and data subjects.
Safety practices to be observed by User:
In order to facilitate seamless access to digital assets, Vtex.AI may automatically create a User ID and password for users within the WordPress system. This process is conducted in the background using secure methods and in accordance with applicable data protection laws, to ensure users do not need to re-authenticate when accessing their digital assets through the platform. By using the platform, users acknowledge and consent to this automated account creation. Although these credentials may not be immediately visible, users may request access to their WordPress login credentials at any time by contacting support@Vtex.AI. While Vtex.AI takes reasonable security measures to protect user data and account credentials, it cannot guarantee absolute security and disclaims liability for unauthorized access beyond its control.
Users are strongly advised to set a unique password for their User Account and to avoid disclosing their login password or account information to anyone, except where necessary (e.g., to an authorized handler). Sharing login credentials or using the same password across multiple sites increases the risk of unauthorized access and may compromise the security of the User Account.
User shall ensure to check the URL whenever he accesses the Site and such URL should match with that of Vtex.AI web site; he should ensure that he is not accessing any website that is fraudulently designed to imitate the Vtex.AI web site. During access to the Site, User should not disclose the verification code he has received, to anyone (including those who claim to be Vtex.AI' employees, agents or business partners). Whenever User logs into his User Account, particularly on somebody else's device or on public or unknown internet terminals, User should always log out at the end of his session and should also ensure that his login or other passwords are not stored or remembered by such device or network and he should also clear the browsing history and cookies by choosing the appropriate settings on such a device. Vtex.AI cannot be held responsible for lapses in security caused by any third party accessing Personal Information as a result of User's failure to keep his Personal Information private. In the event of any breach or compromise of data or any unauthorised access to User Account by any third party or any other breach of security, the affected User must notify Vtex.AI at the earliest opportunity at legal@Vtex.AI. User's assistance and co-operation will help Vtex.AI protect the privacy of Personal Information.
Accessing other features on User's device:
Vtex.AI App may access certain features on User's device. This information is used to allow it to run on User's device and allow such User to interact with it. At any time, User may revoke his permissions by turning them off at the device level or by contacting Vtex.AI at legal@Vtex.AI.
Vtex.AI shall retain Personal Information for the retention period necessary for the purpose of the information collection described in this Privacy Policy, or as required by applicable laws and such retention period may be determined by Vtex.AI on a case-specific basis. Vtex.AI shall cease to retain and delete or anonymize Personal Information once the purpose of collection is fulfilled, or after it confirms User's request for erasure, or after it terminates the operation of the corresponding service.
Vtex.AI shall continue to retain the Personal Information beyond the standard retention period when it is required for the following purposes:
for maintaining records for administrative or tax-related purposes;
for initiating, pursuing or defending a legal claim or for the purposes of legal proceedings, whether initiated by Vtex.AI, User or third parties in any court of law (national or foreign);
for or in connection with complaints relating to the Site or Site Services;
for assisting law-enforcement officials in investigation or for other purposes;
when it is to be maintained as per requirements of applicable law, in compliance of governmental orders, in compliance of orders of any court of competent jurisdiction or any quasi-judicial authorities or any local authority of public governance;
when it is being preserved or intended to be preserved for public interest, scientific or historical research, or statistical purposes; and
any other purpose as may be specified in this behalf by Vtex.AI.
Vtex.AI shall continue to retain certain information for longer than its standard retention period, where permitted based on applicable laws or upon User's request, even if further data processing is not related to the original purpose of collection.
User is hereby conferred upon certain rights relating to his Personal Information as enlisted hereinbelow:
Right to deny providing non-essential Personal Information: User may choose to deny providing any Personal Information which he is asked to provide optionally. User has to provide the Personal Information which is essential for providing him Site Services. But any non-essential information may be provided at the will of the User. User may note that certain services and features need such non-essential Personal Information to function. In case User refuses to provide such non-essential Personal Information, such services and features shall be unavailable for him. User may also be unable to avail any personalisation features available on the Site which require such non-essential Personal Information in order to function.
Right to control Personal Information: Vtex.AI recognizes that privacy concerns differ from person to person. Therefore, it provides examples of ways it makes available to User to restrict the collection, use, disclosure or processing of Personal information and control User's privacy settings, such as to sign in or sign out of the User Account.
In case User had previously granted consent to Vtex.AI for using Personal Information for the aforementioned purposes, User may revoke such consent at any time by contacting Vtex.AI at legal@Vtex.AI. However, User should acknowledge that such revocation of consent shall not affect or prejudice the validity of any action/omission or any transaction or agreement entered into prior to such revocation of consent. User shall not be absolved of any loss, harm, damage, liability or obligation incurred or of any responsibility or burden arisen prior to such revocation of consent by virtue of such subsequent withdrawal of consent.
Right to update Personal Information: To the extent permitted by applicable laws and regulations, User has the right to access, rectify, update and erase any Personal Information that Vtex.AI holds relating to User, hereinafter referred to as the "Right to control Personal Information". User may also access and update the details relating to the Personal Information in his User Account at www.Vtex.AI or by logging into the User Account on his device. For additional information, User may write to Vtex.AI or contact its customer representative at legal@Vtex.AI.
In case any Personal Information being held on behalf of User by Vtex.AI is incorrect or incomplete, User is entitled to have such Personal Information corrected or completed based on the purpose of use.
This Privacy Policy requires that User's Right to control Personal Information satisfies applicable laws and regulations and the following conditions which require that any request for exercising such right should:
be communicated through Vtex.AI' communication channels legal@Vtex.AI , for the protection of User's information and for record purposes, User request should be in writing (unless the local law explicitly recognises the oral request);
provide sufficient information to enable Vtex.AI to verify User's identity and to ensure that he is the data subject or a person legally authorised to act on the data subject's behalf.
Once Vtex.AI obtains sufficient information to confirm that User's request for Right to control Personal Information can be processed, it shall proceed to respond to User's request within any timeframe set out under the applicable data protection laws or as it may deem fit in the absence thereof.
Based on the requirements of applicable laws, User is conferred upon the right to request the deletion or removal of his Personal Information where there is no compelling reason for Vtex.AI to continue using it. Vtex.AI shall consider the grounds regarding User's request for the deletion or removal of such Personal Information and take reasonable steps, including technical measures. Vtex.AI may not be able to immediately remove the information from the backup system due to applicable law and/or technical limitations. In such a case, Vtex.AI shall securely store such Personal Information and isolate it from any further processing until the backup can be deleted or be made anonymous. User is conferred upon the right to object to certain types of processing, including processing for direct marketing, and under certain other circumstances. Particularly under the laws of some jurisdictions:
User has the right to obtain from Vtex.AI the restriction upon processing Personal Information. Vtex.AI shall consider the grounds regarding User's restriction request. In case the grounds apply to GDPR, Vtex.AI shall only process Personal Information under applicable circumstances in GDPR and inform User before the restriction of processing is lifted.
User may withdraw his consent previously provided to Vtex.AI for a particular purpose by submitting a request, including collecting, using, and/or disclosing his Personal Information in possession or control of Vtex.AI. Based upon the specific service User avails, User may contact Vtex.AI at legal@Vtex.AI. Vtex.AI shall process User's request within a reasonable timeframe from when the request was made, and thereafter, not collect, use and/or disclose such Personal Information as per the said request. Depending upon the extent of User's withdrawal of consent, he may not be entitled to continue receiving the full benefit of the Site and Site Services within their originally intended scope. This means that User shall be able to enjoy the benefits pro tanto and does not imply, by any kind of interpretation or construction, that the products offered to User will be defective or that the services offered will be deficient. The withdrawal of consent or authorisation shall not affect the validity of data processing carried out on the basis of the consent till the point of such withdrawal of consent.
In case User wishes to cancel a specific subscription or service provided upon subscription, he may contact Vtex.AI at support@Vtex.AI for canceling such subscription or opting out of such service provided upon subscription.
In case User wishes to cancel the User Account, he may note that such cancellation shall prevent him from accessing the full range and scope of Site Services and products and services included therefrom. Cancellation may be prevented or delayed in certain circumstances.
Vtex.AI processes and backs up Personal Information through a global operating and control infrastructure. For the purposes described in this Privacy Policy, User's information may be transmitted online to data centers in accordance with applicable law. Vtex.AI may also transmit Personal Information to affiliate third party service providers and business partners and User's data may thereafter, also be transmitted to other countries or regions. The jurisdiction in which these global facilities are located may or may not protect Personal Information to the same standards as in User's jurisdiction. There are different risks under different data protection laws and difficulties or concerns pertaining to User's data may arise and as such are beyond the control of Vtex.AI. However, this does not change Vtex.AI' commitment to comply with this Privacy Policy and to protect Personal Information.
In case Vtex.AI needs to transmit Personal Information outside User's jurisdiction, whether to its affiliates or third party service providers, it shall comply with related applicable laws. Vtex.AI ensures that all such transmissions meet the requirements of applicable local data protection laws by implementing uniform safeguards.
Vtex.AI hereby declares that it does not offer Site Services directly to a minor or use personal data of such a minor for the purposes of marketing. For entering into a valid contract, one of the essential requirements of law is age of consent. A person entering into an agreement should be capable of providing his consent thereto. The User Agreement therefore requires persons to have attained the legal age of consent prior to entering and being bound by the User Agreement. In case, a person has not attained majority as per applicable law in his jurisdiction, he shall not be capable of entering into the User Agreement and hence such persons should not access the Site and Site Services.
In case a parent or a guardian has reason to believe that their minor has provided Vtex.AI with personal information, such parent or guardian is requested to kindly contact Vtex.AI at support@Vtex.AI and provide necessary details to ensure that the minor's personal data is removed immediately and that the minor is unsubscribed from any of the applicable Site Services.
This Privacy Policy does not apply to products or services offered by a third party through or in connection with the Site or Site Services. Depending on the service User avails, it may incorporate a third parties' product or service such as payment processing, etc. Some of these will be provided in the form of links to third parties' websites, and some will be accessed in the form of SDKs, APIs, etc. User's Personal Information may also be collected when he accesses or avails these services. For this reason, Vtex.AI recommends that User should take the time to read the relevant third party's privacy policy or relevant portions thereof to understand their privacy policies and practices. Vtex.AI shall not be held responsible for and cannot control how third parties use Personal Information which they collect from User. This Privacy Policy does not apply to other sites linked from the Site Services and in no way governs them. The following are the examples of when third party terms in the relevant privacy policies may apply when User avails specific services from such third parties:
When User uses the services of an affiliate third party payment services provider to make payment, the Personal Information that User provides during the confirmation of such payment is handled in accordance with such affiliate third party's privacy policy.
When User is redirected to a third party website after he clicks on any weblink provided on the Site, any Personal Information he voluntarily provides or is collected from him during his access to such third party website shall be governed by such third party's privacy policy.
In case, during access to the Site and while availing Site Services, a pop-up appears or a window prompt is displayed to User relating to a third party including an advertiser, any Personal Information that User provides or facilitates collection whereof, upon such a pop-up or window prompt, shall be governed by the privacy policy of such third party.
In case User or any person desirous of becoming a party to the User Agreement has any comments, doubts, questions or feedback about this Privacy Policy or any questions relating to Vtex.AI' collection, use, or disclosure of Personal Information or personal information in general, he may contact Vtex.AI through any of the following communication channels:
legal@Vtex.AI
User shall note that while sending his communication in this regard, he must mention "Privacy Policy" at the beginning of his communication so that Vtex.AI' representative may categorise such communication properly in the records of Vtex.AI. When Vtex.AI receives questions relating to privacy or personal information or about access/download requests, it may take time to analyse the pertinent issues and perhaps even seek professional assistance to solve the problems. If the question itself involves a significant issue, Vtex.AI may ask User or other person for making more information available as may be necessary. Vtex.AI expects patience and co-operation from User or other person in this regard in order that it can provide a satisfactory reply or solution.
Vtex.AI shall review this Privacy Policy periodically and considering the changes in business practices, market trends, economy, technology, law, governmental policies, social and political outlook, or in pursuance of agreements entered into with third party affiliates, or updates thereof, in the future, may choose to update this Privacy Policy. Vtex.AI may also choose to update this Privacy Policy in response to customer feedback or in consideration of needs of its users. In case during such process of updation, Vtex.AI makes a substantial change to this Privacy Policy, it may notify User through his registered contact information such as email or may publish on the Site or may send a notification via mobile devices in order that User may learn about how such changes affect him or his interests. Vtex.AI shall ensure from its end that such notifications are addressed and sent properly to User. However, in case of delay or failure to deliver the notification due to technical or other issues beyond its control, User shall not hold Vtex.AI responsible for such delay or failure. Such updates to this Privacy Policy shall be effective from the date specified in the notice or upon the Site.
Vtex.AI recommends and urges all its users to check the Vtex.AI web site home page regularly for making themselves aware of the latest updates to this Privacy Policy. User's continued access to the Site and use of the Site Services subsequent to bringing such updates into effect shall be deemed as an acknowledgement of the updated Privacy Policy.
In case User does not approve of this Privacy Policy or any future updates thereof, he may choose to not access or discontinue his access to the Site and Site Services at any time. Such a discontinuation shall not affect any data of User collected prior to the date of such discontinuation and such data of User shall continue to remain subject to the Privacy Policy in force thereat.
This Privacy Policy, including any future updates thereof, is the authentic legal English version and shall be the primary version for all purposes, official or legal. Any version of this Privacy Policy (current or archived), or any simplified version thereof, provided in English or in a language other than English (whether using Latin script or otherwise) is only for the purpose of convenience of User. In the event of any inconsistency or conflict between provisions or lack of clarity with regards to interpretation with any other version of this Refund Policy, this authentic legal English version solely shall prevail.
-----End of Third Party Affiliation Terms and Conditions-----