Privacy Policy

1. Who is responsible for your data

SIA Vedapt (“Vedapt”) is responsible for the personal data it processes as marketplace operator and merchant of record. This Policy covers Vedapt browsing, accounts, profiles, Programs, progress, community activity, reviews, messages, Creator applications, seller information, purchases, Support, moderation, and account deletion.

Legal name

SIA Vedapt

Registration number

40203771447

Registration date

18 August 2026

Country

Latvia

Privacy contact

support@vedapt.com

Creators create and provide their Programs and may have separate legal responsibilities for data they receive or create in that role.

2. Information Vedapt processes

• Account and profile: your email, sign-in and verification status, username, display name, photo, biography, account dates, privacy choices, notification choices, and account status.
• Programs and community: Program drafts and published versions, memberships, tasks, progress, notes and images, optional Creator feedback, reviews, points, rankings, posts, comments, likes, saved posts, follows, reports, notifications, conversations, messages, and read status.
• Creator and marketplace: Creator applications and decisions, accepted agreements, seller name and type, Stripe readiness status, offers, orders, prices, checkout disclosures, Program and seller snapshots, access rights, refunds, disputes, Creator Earnings, transfers, payouts, and reconciliation records.
• Security, Support, and legal records: session and security signals, device and network data handled by service providers, request and audit records, Support cases, moderation and appeal information, and the policy versions and declarations you accept.

Stripe collects payment-card, bank, identity, representative, tax, and payout details on Stripe-hosted pages. Vedapt does not ask you to enter those details on Vedapt pages or copy them into its database. Vedapt receives the transaction and verification status needed to operate the marketplace.

3. Why Vedapt uses this information

• To create and secure accounts and provide profiles, Programs, progress, community features, messages, purchases, access, refunds, and Creator services under the Terms.
• To meet accounting, tax, consumer-disclosure, legal-request, and record-keeping duties.
• To prevent fraud and abuse, moderate content, protect the service and its users, handle disputes, and maintain reliable operations where Vedapt has a legitimate interest.
• To establish, exercise, or defend legal claims and protect vital interests in an emergency.
• For optional processing only when an appropriate consent or other lawful basis applies.

Vedapt does not currently use advertising networks, behavioural advertising, analytics tracking, session-replay tools, or account and Creator content to train generative-AI models.

4. Public information and who receives data

Information you intentionally publish to a public profile, Program, review, leaderboard, or community area can be seen by people who can access that area. Before checkout, the Program page shows the Creator’s legal or business name and whether the Creator is selling as an individual or business. Vedapt does not publish a Creator’s residential address, personal phone number, tax identifiers, identity documents, bank details, or payout details as part of that disclosure. Follower-only or private posts, private progress, and messages are not made public or licensed for public marketing.

Program participants and Creators can see information needed for their roles, and conversation participants can see their messages. Google Firebase and Cloud provide hosting, sign-in, database, storage, security, and service infrastructure. Stripe provides checkout, Creator verification, payments, refunds, disputes, and payouts. An external image host may receive ordinary request information, such as an IP address and browser details, when a hosted fallback image is displayed. Vedapt may also share data with professional advisers, contracted service providers, payment partners, courts, regulators, or authorities where lawfully necessary. Vedapt does not sell personal data or Creator Content.

5. International processing

Google and Stripe operate international services and may process data outside Latvia or the EEA. Where GDPR transfer rules apply, Vedapt and its providers must use an applicable adequacy decision, standard contractual clauses, or another lawful safeguard.

6. How long data is kept

• Account and active service data is kept while your account or relationship with Vedapt is active, then deleted or anonymized unless another lawful reason requires retention.
• Shared messages, Program and community records, purchased Program versions, and Creator or Member records may remain where other participants need them or they are needed for delivery, safety, moderation, disputes, or legal claims. Your identity may be anonymized.
• Orders, refunds, disputes, Creator Earnings, payouts, and accounting records are kept for the period required by Latvian law and any other applicable law.
• Seller, legal-acceptance, security, moderation, and Support records are kept only as long as reasonably needed for their purpose, applicable law, or legal claims.
• Stripe keeps the payment, identity, bank, and tax data it controls under its own terms and legal duties.

Deletion is not absolute where retention is legally required. Data that is no longer needed must be deleted or irreversibly anonymized, and retained data must be limited to the reason it is kept.

7. Your privacy rights

Subject to GDPR conditions and exceptions, you may ask for access, correction, deletion, restriction, or eligible data portability. You may object to legitimate-interest processing or direct marketing and withdraw consent where processing relies on consent. You may also ask for human review of a solely automated decision that has legal or similarly significant effects.

Vedapt does not intentionally use points, ranking, or security controls to make solely automated legal or similarly significant decisions. Automated security checks may block a request; contact Support if you believe a security decision is wrong. Vedapt normally responds to privacy requests without undue delay and within one month, subject to lawful extensions and identity verification.

Contact support@vedapt.com. You may complain to Latvia’s Data State Inspectorate (Datu valsts inspekcija) or another competent supervisory authority, including the authority where you live or work in the EEA.

8. Security, age, and changes

Vedapt uses access controls, security checks, rate limits, restricted data access, audit records, and Stripe-hosted payment and verification pages. No system is perfectly secure. Do not send passwords, full card or bank details, government IDs, or unnecessary sensitive information through Support or content fields.

Vedapt is for adults aged 18 or over and is not intended for children. Vedapt may ask you to accept a materially updated Privacy Policy.

9. Contact

Use Support and Contact. Privacy contact: support@vedapt.com.