Privacy & Policy

2. Data Controller & Contact

PrepVia LLC acts as the Data Controller. Our contact details are:

3. Data We Collect

We may collect the following categories of information:

• Identification Data: name, email address, phone number, billing and shipping address.
• Financial Data: payment details (processed securely by Stripe), invoices, billing records. We do not store credit card numbers directly.
• Authentication Data: usernames, passwords, and account credentials.
• Uploaded Data: invoices, receipts, product information, and documents shared through our platform.
• Communications: customer support messages, emails, and call records.
• Technical Data: IP address, cookies, device ID, browser type, log data.
• Marketing Data: preferences, interactions with newsletters, campaigns, and offers.

4. How We Collect Data

• Directly: when you register, purchase, or upload documents.
• Automatically: through cookies, analytics tools, and logs.
• From Third Parties: including Stripe (payments), marketplaces such as Amazon/Walmart, and analytics providers.

5. Purposes and Legal Bases for Processing

We process your data for the following purposes:

• Service Fulfillment: to provide prep center and logistics services (Contract Performance).
• Payment Processing & Invoicing: to handle payments and issue financial documents (Contract/Legal Obligation).
• Customer Support & Communication: to respond to inquiries (Legitimate Interest/Contract).
• Marketing & Promotional Communication: to provide offers with consent or legitimate interest.
• Analytics & Service Improvement: to enhance user experience (Legitimate Interest).
• Security & Fraud Prevention: to detect and prevent fraudulent activity (Legal Obligation/Legitimate Interest).
• Legal Compliance: to meet tax, accounting, and regulatory obligations (Legal Obligation).

6. Sharing Data with Third Parties

We only share your information where necessary:

• Stripe: for secure payment processing.
• Hosting & Cloud Services: including AWS for data storage.
• Marketplaces: such as Amazon and Walmart, where integrations require.
• Analytics & Marketing Providers: for platform optimization and communication.
• Professional Advisors: including legal, tax, and accounting consultants.
• Regulatory Authorities: if legally required.

7. International Data Transfers

Your information may be transferred to jurisdictions outside your country. In such cases, we ensure appropriate safeguards, including Standard Contractual Clauses or equivalent measures, to comply with GDPR, CCPA, and LGPD.

8. Data Security

We apply strict technical and organizational measures to protect your information, including:

• Encryption in transit (SSL/TLS) and at rest.
• Role-based access controls.
• Regular penetration testing and vulnerability assessments.
• Firewalls, intrusion detection, and continuous monitoring.

9. Data Retention

We retain personal data only as long as necessary:

• Payment & invoicing data: at least 5 years for tax/legal compliance.
• Account data: until deletion request or contract termination.
• Technical logs & analytics: retained for 12 months.
• Legal compliance data: retained as long as required by law.

10. Your Rights

Under applicable law (GDPR, CCPA, LGPD), you have rights including:

• Access: to know what personal data we hold.
• Correction: to update inaccurate information.
• Deletion: to request erasure of your data.
• Restriction: to limit how your data is processed.
• Portability: to receive your data in a transferable format.
• Objection: to object to processing for marketing or legitimate interests.
• Consent Withdrawal: at any time, without affecting prior lawful processing.

11. Children's Privacy

Our services are not directed at individuals under 13. We do not knowingly collect data from children. If we discover data collected from minors, we will delete it immediately.

12. Cookies & Tracking Technologies

We use cookies, pixels, and other tracking technologies for functionality, analytics, security, and marketing. You can manage preferences via browser settings or opt-out options provided in accordance with applicable law.

13. Legal Disclosures

We may disclose personal data when required by law, subpoena, or court order, or when we believe it is necessary to protect our rights, safety, or comply with legal obligations.

14. Changes to the Privacy Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted with an updated effective date. Material changes will be notified via email or portal alerts.

15. Contact Information

For privacy-related inquiries, please contact: