V&M GLOBAL LLC | V&M Business Systems

V&M GLOBAL LLC

dba V&M Business Systems

Privacy Policy

KREATON · Listo POS · ListoKDS

Applicable to: KREATON, Listo POS, and ListoKDS

Effective date: (to be completed upon publication)

Last updated: (fill in upon publication)

This Privacy Policy describes how V&M Global LLC, doing business as V&M Business Systems ("V&M," "we"), collects, uses, discloses, and protects the personal information of users of KREATON, Listo POS, and ListoKDS (collectively, the "Services"). This Policy is incorporated by reference into the Terms of Service.

1. Scope and Data Controller

V&M Global LLC, domiciled in Delaware, United States, is the controller of personal data collected through the Services. This Policy applies to users of KREATON (website and AI generation panel), Listo POS, and ListoKDS (applications and administration panels), regardless of the country from which they access the Services.

2. Information We Collect

2.1 Account and identification data

Name, email address, phone number.
Business name and tax identification number (RIF or equivalent), where applicable.
Access credentials (stored encrypted).

2.2 Billing and subscription data

Subscription history, plan, and payment status.
Payment card data processed directly by our payment provider (Stripe); V&M does not store full card numbers on its own servers.

2.3 Technical and device data

License identifier and device fingerprint ("hardware ID"), used to validate licenses and prevent unauthorized copying of Listo POS and ListoKDS.
IP address, device type, operating system, application version, and error logs.

2.4 Business operational data (Listo POS / ListoKDS)

Product catalog, prices, inventory, sales, orders, and movements recorded by the User in its day-to-day operations.
Exchange rate and tax configuration set by the User.
This data belongs to the Customer that generates it; V&M processes it solely to provide the Service.

2.5 Content generated in KREATON

Text, images, prompts, and instructions provided by the User for AI-assisted website and content generation.

3. How We Use Your Information

To provide, maintain, and improve the Services.
To process payments and manage subscriptions.
To validate licenses and prevent fraud or unauthorized use.
To provide technical support and communicate with you about your account.
To comply with legal, accounting, and tax obligations.
With your consent or another valid legal basis, to send commercial communications about new features.

We do not sell your personal information. We share data only with service providers ("processors") that assist us in operating the Services, under contractual confidentiality and use-limitation obligations, including, among others:

Stripe, Inc. — payment and subscription processing.
Supabase — database and backend infrastructure.
Render — hosting for the Services' backend.
Cloudflare — network infrastructure, security, and email routing.
AI model providers — to process content-generation requests in KREATON.

We may also disclose information where reasonably necessary to: comply with a legal obligation or request from a competent authority; enforce these Terms; protect the rights, property, or safety of V&M, our users, or the public; or in connection with a merger, acquisition, or sale of assets.

5. International Data Transfers

Our infrastructure providers operate servers in various countries, including the United States. If you use the Services from outside the United States, you understand and agree that your information may be transferred to and processed in the United States and in other countries where our providers maintain infrastructure, subject to appropriate contractual safeguards.

6. Data Security

We implement reasonable technical and organizational measures (encryption in transit, access controls, separation of third-party credentials) to protect personal information. No system is completely secure; in the event of a security breach affecting personal information, we will notify as required by applicable law.

7. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including compliance with legal, tax, and dispute-resolution obligations. Records of privacy-rights requests are retained for a minimum of twenty-four (24) months. After an account is canceled, operational data may be retained in backups for a reasonable period before permanent deletion.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), grants you the following rights with respect to your personal information:

Right to know / access what personal information we collect, use, disclose, and, where applicable, "share" (as defined under the CPRA), and the categories of third parties with whom it is shared.
Right to delete your personal information, subject to applicable legal exceptions (for example, accounting or tax obligations).
Right to correct inaccurate personal information.
Right to opt out of the sale or sharing of your personal information. V&M expressly states that it does not sell personal information for monetary consideration and does not "share" it for cross-context behavioral advertising within the meaning of the CPRA.
Right to limit use of sensitive personal information to purposes necessary to provide the Services.
Right to non-discrimination for exercising any of these rights.

8.1 How to exercise your rights

You may exercise these rights by sending a request to [email protected], stating your name, the email associated with your account, and the right you wish to exercise. We will verify your identity before processing the request and will respond within the forty-five (45) day period required by law, extendable once for an additional reasonable period where necessary. You may authorize an agent to submit the request on your behalf, subject to verification.

8.2 Applicability threshold

V&M periodically reviews whether it meets the CCPA/CPRA applicability thresholds (annual gross revenue, volume of consumers or devices, or percentage of revenue derived from the sale or sharing of personal information). Regardless of that threshold, V&M applies the transparency and control principles described in this section as a general practice to all of its users.

9. Users in Venezuela and Other International Jurisdictions

For users located outside the United States, including Venezuela, V&M applies, as a general best-practice standard, the same principles of transparency, data minimization, and user control described in this Policy, regardless of whether a directly applicable data protection law exists in your country. If your jurisdiction has an applicable data protection law, your local rights will prevail to the extent they are broader than those described here.

10. Cookies and Similar Technologies

The KREATON website and V&M's customer portal may use essential cookies necessary for their operation and, with your consent, analytics cookies to understand site usage. You may manage cookie preferences through your browser settings.

11. Children's Privacy

The Services are directed to businesses and professionals and are not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor without appropriate parental consent, we will take reasonable steps to delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by email, indicating the "Last updated" date at the beginning of the document. Continued use of the Services after the effective date constitutes acceptance of the updated version.

This Policy is the original, controlling document. Where a Spanish-language version is provided as a courtesy translation, this English version will prevail in the event of any discrepancy.

13. Contact and Exercising Your Rights

V&M Global LLC (dba V&M Business Systems) Privacy / data rights: [email protected] General inquiries: [email protected] Website: vmbusinesssystems.com