Privacy Policy

VCM.fyi (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (vcm.fyi), application (app.vcm.fyi), newsletter (news.vcm.fyi), and related services (collectively, the “Service”).

1. Information We Collect

Information You Provide

• Account Information — Email address, name, and company name when you create an account or sign up through Google authentication
• Newsletter Subscription — Email address when you subscribe to our newsletter via Beehiiv
• Communication — Any information you provide when you contact us at hi@vcm.fyi

Information Collected Automatically

• Usage Data — Pages visited, features used, time spent on pages, and interaction patterns, collected via Vercel Analytics
• Device Information — Browser type, operating system, and device type
• Log Data — IP address, access times, and referring URLs

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service, including user authentication and account management
• Send our weekly newsletter and market intelligence updates
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, our legal basis for processing your personal data includes:

• Consent — When you subscribe to our newsletter or opt in to communications
• Contract Performance — When processing is necessary to provide the Service you signed up for
• Legitimate Interest — For analytics and improving the Service, provided this does not override your fundamental rights
• Legal Obligation — When processing is required to comply with applicable law

4. Data Sharing and Processors

We share data only with service providers necessary to operate the platform:

We do not sell, rent, or trade your personal information. We may disclose information if required by law or to protect our rights, safety, or property.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account or unsubscribe from the newsletter, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and improvement purposes.

6. Your Rights Under GDPR

If you are in the EEA or UK, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data (“right to be forgotten”)
• Portability — Request your data in a structured, machine-readable format
• Restriction — Request limitation of processing
• Objection — Object to processing based on legitimate interest
• Withdraw Consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at hi@vcm.fyi. We will respond within 30 days.

7. Your Rights Under CCPA

If you are a California resident, you have the right to:

• Know — Request disclosure of what personal information we collect, use, and share
• Delete — Request deletion of your personal information
• Opt-Out of Sale — We do not sell personal information, so this right does not apply
• Non-Discrimination — We will not discriminate against you for exercising your rights

To exercise any of these rights, email us at hi@vcm.fyi.

8. Newsletter and Email Communications (CAN-SPAM)

Our newsletter is distributed via Beehiiv. When you subscribe, you consent to receiving our weekly market intelligence newsletter and occasional product updates.

• Every email includes a clear, functional unsubscribe link
• Unsubscribe requests are honored within 10 business days
• We will never send emails on behalf of third parties
• Our physical mailing address is included in all commercial emails as required by law

You can unsubscribe at any time by clicking the unsubscribe link in any email or by contacting us at hi@vcm.fyi.

9. Cookies and Tracking

VCM.fyi uses minimal tracking:

• Vercel Analytics — Privacy-focused web analytics that do not use cookies for tracking and do not collect personally identifiable information
• Session Cookies — Essential cookies for maintaining your login session when you sign in to the application

We do not use third-party advertising cookies or cross-site tracking.

10. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hi@vcm.fyi.

11. International Data Transfers

Your data may be processed and stored in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions that may not provide the same level of data protection as your home country.

For EEA/UK users, we rely on Standard Contractual Clauses and other approved transfer mechanisms where required to ensure adequate protection of your data.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS/SSL), access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date. For material changes, we will provide notice through the Service or via email. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions, data requests, or complaints, contact us at:

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority.