Privacy Policy.

Welcome to vetivr. ("we," "us," or "our"). We operate the website vetivr.com and any related applications or services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or use our Service.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service. By accessing or using vetivr., you agree to the collection and use of information in accordance with this policy.

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date above. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

01

Information We Collect

We collect information you provide directly to us and information collected automatically when you use the Service.

Information you provide directly:

• Email address — when you join our waitlist, sign up for an account, or subscribe to our newsletter.
• Account information — when you create a vetivr. account, including your name, username, and password.
• Fragrance data — information you enter about your fragrance collection, reviews, ratings, and wear logs.
• Communications — any messages or feedback you send to us directly.
• Payment information — when you subscribe to a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store your full credit card details on our servers.

Information collected automatically:

• Usage data — pages visited, features used, time spent, and actions taken within the Service.
• Device information — browser type, operating system, IP address, and device identifiers.
• Log data — server logs including your IP address, browser type, referring URLs, and timestamps.
• Cookies and similar technologies — see Section 4 for details.

02

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Create and manage your account.
• Send you transactional emails — account confirmations, password resets, and subscription updates.
• Send you marketing emails and our newsletter, where you have opted in. You may unsubscribe at any time.
• Personalise fragrance recommendations and your scent profile based on your collection data.
• Process payments and manage subscriptions.
• Respond to your inquiries and provide customer support.
• Monitor and analyse usage to improve the Service.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We will only use your personal information for the purposes described in this policy unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose.

03

Affiliate Links & Third-Party Services

vetivr. participates in affiliate marketing programs. This means that when you click on certain links to purchase fragrances through our Service, we may earn a small commission at no additional cost to you.

Our Service may contain links to third-party websites, retailers, and services. These third parties have their own privacy policies, and we do not accept any responsibility or liability for their policies or practices. We encourage you to read the privacy policy of every website you visit.

Third-party services we use may include:

• Stripe — payment processing. Stripe's privacy policy governs payment data.
• Supabase — database and authentication infrastructure.
• Beehiiv / ConvertKit — email list management and newsletters.
• Vercel — website hosting and delivery.
• Plausible / PostHog — privacy-friendly analytics.
• Affiliate networks — ShareASale, Rakuten, Impact, and Amazon Associates for affiliate tracking.

Each of these services operates under its own terms of service and privacy policy. We recommend reviewing their policies to understand how they handle your data.

04

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate the Service, remember your preferences, and understand how users interact with our website. You can control cookies through your browser settings, though disabling certain cookies may affect the functionality of the Service.

Types of cookies we use:

• Essential cookies — required for the Service to function, including authentication and session management.
• Preference cookies — remember your settings and personalisation choices.
• Analytics cookies — help us understand how visitors use the Service. We use privacy-friendly analytics tools that do not sell your data.
• Affiliate tracking cookies — placed by affiliate networks to attribute purchases made through our links. These typically remain active for 24–30 days after a click.

Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse cookies, or to alert you when cookies are being sent. Note that refusing cookies may impact some features of the Service.

05

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers — we share data with trusted third-party vendors who assist in operating the Service (e.g. payment processing, email delivery, hosting). These providers are contractually obligated to handle your data securely and only for the purposes we specify.
• Affiliate networks — when you click an affiliate link, tracking data is shared with the relevant affiliate network to attribute the click. No personally identifiable information beyond what is standard for affiliate tracking is transmitted.
• Legal requirements — we may disclose your information if required by law, court order, or government authority, or where we believe disclosure is necessary to protect the rights, property, or safety of vetivr., our users, or the public.
• Business transfers — in the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent — we may share your information for other purposes with your explicit consent.

06

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, unless we are required to retain it for legal, regulatory, or legitimate business reasons.

Email addresses collected for our waitlist or newsletter will be retained until you unsubscribe or request deletion. You may unsubscribe at any time using the link in any of our emails.

Anonymised and aggregated data — which cannot be used to identify you — may be retained indefinitely for analytical purposes.

07

Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal data, subject to certain legal exceptions.
• Portability — request your data in a structured, machine-readable format.
• Opt-out of marketing — unsubscribe from marketing emails at any time using the unsubscribe link in our emails, or by contacting us directly.
• Withdraw consent — where we rely on your consent to process your data, you may withdraw that consent at any time.
• Lodge a complaint — if you are located in the EU or UK, you have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at hello@vetivr.com. We will respond to all requests within 30 days.

California residents (CCPA):

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at hello@vetivr.com.

08

Children's Privacy

vetivr. is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as soon as possible.

If you believe we may have collected information from a child under 13, please contact us immediately at hello@vetivr.com.

09

Security

We take the security of your personal information seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit (HTTPS), secure authentication practices, and access controls.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights, we will notify you as required by applicable law.

10

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We take all privacy inquiries seriously and will respond within 30 days of receiving your request. For urgent concerns, please mark your subject line accordingly.