Privacy Policy
Updated October 24, 2026
1. Summary
Vanta ("we", "our") operates the website vanta-app.shop and the Vanta Android client application. This policy describes which personal data we process and why. Summary: very little.
2. Data we DO NOT collect
- History of apps installed, opened or removed through Vanta.
- Advertising identifiers (AAID, GAID).
- Precise location.
- Contacts, SMS, calls, calendar or photos.
- Third-party analytics (Google Analytics, Facebook Pixel, etc.) on the website or Android client.
3. Data we do process
Website (vanta-app.shop): standard server logs (IP address, user-agent, requested URL) retained for at most 7 days for security and diagnostic purposes. Not cross-referenced with identification cookies.
Android client (Vanta): when checking for updates, the client sends the current app version and the Android version. No device or user identifier is sent.
Communications: if you write to [email protected] we keep the message for up to 24 months for follow-up.
4. Legal basis
In jurisdictions with GDPR-type regulations, LGPD (Brazil) or CCPA (California), the legal basis is legitimate interest (network security) for logs and consent (download click) for APK delivery.
5. International transfers
Our files are served from Cloudflare’s global network. No personal data is transferred beyond the logs described above.
6. Your rights
You may request access, rectification or deletion of any data we may hold about you by writing to [email protected]. We respond within 30 days.
7. Changes
If we change this policy we will note it at the top of the document and, for material changes, announce it on the site for at least 30 days.
8. Contact
Vanta — [email protected]