Privacy Policy

This policy explains what personal data Vertlio collects, why, who helps us process it, and the choices and rights you have. Vertlio (vertlio.com) is operated by Vertical Global Limited, Nigeria, which is the data controller for your account data. It applies wherever you are, including in Nigeria (NDPA 2023), the United Kingdom (UK GDPR), the European Economic Area (GDPR) and the United States.

1. What we collect

• Account details: your name, email address and password (stored only as a secure hash).
• Your websites: the text, images, code and settings you create or upload, and your custom domain names.
• Leads: messages and contact details that visitors send through forms on your websites. For these, you are the controller and we process them on your behalf.
• Payments: the plan, amount, currency and payment reference. Card and bank details are entered on Paystack's page and never reach us.
• Usage and device data: IP address, approximate country (to show prices in your currency), browser and pages visited, and, only with your consent where required, analytics.
• Prompts you write for our AI features, sent to the AI providers below to produce your content.
• Affiliate program (if you join): your agreement to the Affiliate Program Terms (time, version and IP address), your referral link, who signed up through it, your earnings, and the bank, PayPal or Wise details you give us for payouts. If you sign up through someone's link, we record who referred you and whether you've paid, and the card signature Paystack gives us for each payment, used only to detect self-referrals.
• Security: the browser and IP address of each sign-in, so we can alert you to sign-ins from new devices.

2. Why we use it, and our legal basis

• To provide Vertlio (your account, hosting your websites, delivering leads, AI features, billing): contract.
• Service and account emails (receipts, renewal reminders, security notices): contract and legitimate interests.
• News and offers by email: legitimate interests or consent. Every such email has an unsubscribe link, and you can switch them off in Settings.
• Analytics to understand and improve Vertlio: consent in the UK, EEA and Switzerland; elsewhere legitimate interests, and you can opt out at any time.
• Security, fraud prevention and keeping records the law requires (for example tax records of payments): legitimate interests and legal obligation.
• Running the affiliate program (tracking referrals, paying commissions and rewards, preventing abuse): contract with affiliates, and legitimate interests for referred users.

We do not sell your personal data or share it for cross-context behavioural advertising.

3. Cookies and similar storage

• Essential (always on): keeping you signed in, remembering your cookie choice, and a cookie with your country (vtl_country) so prices show in your currency. These are needed for the site to work.
• Referral (only if you open someone's referral link): a cookie (vtl_ref) that remembers the link for 60 days, so the person who referred you is credited if you sign up. It isn't used for advertising or to follow you on other sites.
• Analytics (optional): PostHog, to see how Vertlio is used, including anonymised session recordings with form inputs masked. In the UK, EEA and Switzerland these run only after you click Accept; everywhere, choosing Reject stops them.

Change your choice anytime with Cookie settings at the bottom of every page. Websites built on Vertlio show their own cookie notice, set by their owners.

4. Who helps us (processors)

We share data only with providers that help us run Vertlio, under contracts that protect it:

• Supabase: database.
• Cloudflare: hosting, content delivery, security, file storage (R2) and custom domains.
• Paystack (a Stripe company): payments.
• Resend and ZeptoMail: sending emails.
• PostHog: analytics, with your consent where required.
• Google (Gemini), Groq, OpenRouter and Cloudflare Workers AI: generating content from your prompts. When you choose to build with ChatGPT, Claude or another AI in your own account, your use of that service is governed by its own terms.

5. International transfers

Some of these providers process data outside your country, including in the United States and the EU. Where the law requires it, we rely on the safeguards these providers offer, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

6. How long we keep it

Affiliate records (referrals, earnings and payouts) are kept for as long as tax and accounting law requires, even after you leave the program. Affiliates only ever see the first name and last-name initial of the people they referred, when they joined and whether they've paid; never their email or other details.

We keep your account data while your account is open. When you delete your account, we erase your account, websites and leads within 30 days, except payment records, which we keep only as long as tax and accounting law requires. Backups are overwritten on a rolling basis.

7. Your rights

Wherever you live, you can ask us to:

• Access and port your data: download it yourself from Settings → Privacy & Your Data.
• Correct anything inaccurate.
• Erase your data: use Delete Account in Settings.
• Object to or restrict processing, including all marketing.
• Withdraw consent at any time, for example with Cookie settings, without affecting what was done before.

We reply within one month. You can also complain to your data protection authority: the Information Commissioner's Office (UK), your local authority in the EEA, or the Nigeria Data Protection Commission. California residents have the right to know, delete and correct their data, and not to be discriminated against for using these rights.

8. Security

We use encryption in transit (HTTPS), hashed passwords, access controls, and isolation of website code from your account. No system is perfectly secure, and we will notify you and the authorities of a breach where the law requires.

9. Children

Vertlio is not meant for anyone under 16, and we do not knowingly collect their data.

10. Changes and contact

We'll update the date above when this policy changes, and tell you by email about important changes. Questions or requests: [email protected].