VPSoto

Privacy Policy

Last updated: 5/6/2026

What we collect

How we use it

To deliver the services you ordered, send transactional emails, prevent fraud and abuse, and meet legal obligations.

Sharing

We share data only with sub-processors required to deliver the service (Stripe, NowPayments, our wholesale suppliers when provisioning your order). We don't sell personal data.

Storage & security

Data lives in our self-hosted Postgres + object storage. Server credentials we deliver to you are encrypted at rest with libsodium secretbox; decryption happens server-side only when you (or staff acting on your behalf) explicitly request it, and every access is logged.

Your rights

You can request export, correction, or deletion of your personal data at any time by emailing privacy@vpsoto.com. We respond within 30 days.

Cookies

We use a session cookie for authentication and a localStorage entry for cart + currency preference. No third-party trackers.