Privacy Policy

Last updated: September 20, 2026

This notice explains how VITAL EXTEND LLC handles personal information through VitalExtend, our website, communications, business social accounts and our internal assistant, Vera. For a privacy request, email info@vitalextend.com.

1. Who we are and what this notice covers

VITAL EXTEND LLC, doing business as VitalExtend (also styled Vital Extend), is responsible for the personal information we handle for the purposes described here. Our contact address is 66 West Flagler Street, Suite 900, Miami, FL 33130, United States. Contact us at info@vitalextend.com.

This notice covers vitalextend.com, customer accounts, product-availability requests, orders where offered, email correspondence, interactions with our business social accounts, and the Vera — VitalExtend application. It covers our handling of information from those channels, including information received directly from you or through an authorized platform connection. Social platforms separately control information collected through their own services under their own privacy notices.

Reading this notice or visiting our website does not authorize access to your social account or constitute consent to every type of processing. Where consent is required, we ask for it separately.

2. Information we handle and its sources

  • Information you provide: your name, email, telephone number, account details, delivery and billing addresses, and the content of your requests or correspondence, depending on the features you use. If an order is placed, we also handle its items, amount, status and transaction references. Do not send passwords or full payment-card details by email or social message.
  • Availability requests: the email address you submit, the product or variant selected, signup source and related timestamps. This signup does not request payment-card information or take an upfront payment. It is used for the availability request you made, not as permission for unrelated marketing.
  • Website and security information: IP address, browser and device information supplied with requests, requested pages, referring pages where provided, timestamps, errors, and functional cookie identifiers. These details can be personal information; we do not assume that logs are anonymous.
  • Social information: the profile name, handle, public profile information and content you make available when you interact with our Pages or send us a message, together with platform-provided engagement information. An authorized API connection may also provide account or Page identifiers, administrator authorization details, permitted post/comment data and Page statistics. The information available depends on the platform and the permissions actually granted.

You may browse without creating an account. Information marked as required is needed for the particular request or service; withholding it may mean we cannot complete that request. Please avoid sending medical records, diagnoses or other sensitive information that is unnecessary for your inquiry.

3. How and why we use information

We use relevant information to:

  • Provide requested account, product-availability, order and customer-support services.
  • Respond to correspondence and manage our business social Pages and their interactions.
  • Prepare and review business content, and understand our Pages' performance.
  • Maintain website functions, troubleshoot errors, protect accounts and prevent abuse.
  • Keep necessary business records, handle disputes and meet legal obligations.
  • Send marketing communications only where you have requested them or otherwise given the required permission.

Where EU or UK data-protection law applies, the legal basis depends on the purpose: performing a contract or taking requested steps toward one; our legitimate interests in responding to inquiries, operating and securing the business and understanding its performance, subject to your rights; compliance with legal obligations; or consent where required, including for applicable marketing or optional tracking. You may withdraw consent without affecting processing that was lawful before withdrawal.

4. Social accounts and Vera

Vera is an internal assistant operated for VitalExtend. It supports correspondence triage, content preparation and review, and business administration. Authorized personnel can review relevant correspondence and drafts. It is not a service for managing unrelated customers' social accounts.

As of this notice's update, Vera's automated social API integrations are still being set up. They are not importing social data or publishing automatically. Our staff may manage our business Pages directly through each platform. Registering a developer app or generating a token does not mean that a live connection or additional platform access has been approved.

When a supported connection is activated, its administrator must authorize the account and permissions through the platform. We request only access needed for the stated function. We use permitted data to manage our own content, respond to interactions and review Page performance. We do not use LinkedIn member data to build off-platform prospect lists, infer sensitive characteristics, or target people with advertising.

Administrators can withdraw access in the platform's connected-app or business-integration settings and can contact us to disconnect Vera. Withdrawal stops future authorized access; it does not itself remove information already held. Use the deletion process below for those records. We do not ask you to give Vera your social-platform password.

5. AI-assisted work and human review

We use AI services through OpenRouter for assisted analysis and drafting. In the current setup, paid model exercises use public business information and fictional test inputs. Customer emails, private social messages and LinkedIn API member data are not being sent to these services through Vera's current workflows. Locally stored correspondence and drafts remain separate from those model exercises.

We do not train or fine-tune AI models using your correspondence or LinkedIn API data. Any future use of personal information with an AI provider requires a permitted purpose, appropriate provider safeguards, an accurate notice and any necessary consent before that use begins. Platform restrictions can prohibit a use even when information is public. Vera does not make solely automated decisions that produce legal or similarly significant effects on individuals.

6. Who may receive information

Access is limited to authorized personnel and providers needed for the purposes above. Our present infrastructure includes GreenCloudVPS for hosting, Hostinger for email, and OpenRouter and the selected model providers for the limited AI use described above. Website databases and operational backups support our services. If an order requires a delivery or payment provider, relevant information is shared for that transaction and the provider is identified through that service.

A social platform receives content and instructions submitted through its service. Its own privacy policy also applies. We may disclose relevant information to professional advisers, when lawfully required by authorities, to protect rights and safety, or in a business transfer subject to applicable privacy protections. We do not sell personal information or share it for cross-context behavioral advertising. We do not provide LinkedIn API member data to external AI services under the current setup.

7. Cookies and similar technologies

The current storefront uses functional cookies for account sessions, shopping carts, caching and language preferences. Depending on the feature used, these include the following configured lifetimes; using a feature again may renew its cookie, and signing out or clearing cookies may remove it earlier.

Functional website cookies and their configured lifetimes
CookiePurposeLifetime
_medusa_jwtSigned-in account session7 days
_medusa_cart_idShopping cart7 days
_medusa_cache_idSite cache identifier24 hours
_medusa_localeLanguage preference1 year

The current storefront does not load advertising pixels or third-party behavioral analytics scripts. We will update this notice and obtain any required consent before introducing optional tracking. You can manage or delete cookies in your browser; blocking them can affect account and cart functions. Our policy is not to sell or share personal information for cross-context behavioral advertising, including when your browser sends a Global Privacy Control signal.

8. Retention and deletion

We retain information for the purpose for which it was collected and applicable recordkeeping obligations. The criteria include whether your account or request remains active, whether an availability notification is still relevant, whether a support issue or dispute is unresolved, and whether tax, accounting, security or other legal obligations require a record. A product-interest signup is not a reason to retain unrelated information.

Retention and deletion requests are reviewed by a person; we do not claim that every system automatically erases records after a single fixed period. A deletion review includes active records, relevant service providers and backup copies. If information must be retained, we explain the reason and limit its use to that reason. Removing our copies cannot remove a public post or information independently held by a social platform or another person.

Connected-platform data is also subject to that platform's stricter storage limits and deletion rules. Before activating LinkedIn API data storage, we must support its applicable limits, including up to 24 hours for other members' profile caching and 48 hours for members' social activity, with earlier deletion when required. Those connections remain inactive while their data-handling controls are being completed.

9. Your choices and privacy requests

Email info@vitalextend.com with the subject “Privacy request” and tell us whether you want access, correction, deletion, withdrawal of consent, or disconnection of an account. Include the email address or social handle relevant to the request and enough context to locate the record. You do not need to create a new account or provide a password, access token or payment-card number. You may also write to our postal address.

We may ask for proportionate information to verify your identity or an authorized agent's authority before disclosing or changing records. We respond within the period required by applicable law and explain a permitted extension, refusal or retention exception. You can ask us to reconsider a decision by replying to our response. We do not discriminate against you for exercising applicable privacy rights.

You can ask us to stop availability or marketing messages at any time. Use an unsubscribe mechanism where provided, or email us. Necessary responses about an existing request, account, order or legal matter may still be sent. For a platform's own records or account, use that platform's privacy controls as well.

10. Rights under applicable regional laws

California and other US states: where the relevant law applies to our processing, rights may include knowing or accessing personal information, correction, deletion, portability, and opting out of sale, targeted advertising or certain profiling. California rights also include non-discrimination and limits on certain uses of sensitive personal information. We do not sell or share information for cross-context behavioral advertising or use sensitive information for advertising profiles. The general CCPA response period for requests to know or delete is 45 calendar days, subject to its verification and extension rules; different request types may have different deadlines.

EEA and UK: where the GDPR or UK GDPR applies, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. We generally respond within one month, subject to applicable exceptions and permitted extensions. You may complain to your local data-protection authority, including the UK Information Commissioner's Office where relevant. These rights depend on the circumstances and applicable legal exceptions.

11. Security and international processing

We use measures such as HTTPS, restricted administrative access and protected credentials. Vera's stored correspondence and its operational backups use encryption. No transmission or storage system can be guaranteed completely secure; please use the contact address to report a privacy concern.

We operate from the United States, and information may be processed where our personnel or relevant providers operate. Privacy laws may differ from those in your location. Where applicable law requires safeguards for an international transfer, those safeguards must be in place before that transfer, such as an applicable adequacy decision or approved contractual protections. Contact us for information about safeguards relevant to your data.

12. Children and sensitive information

Our website and services are intended for adults and are not directed to children under 18. We do not knowingly collect children's personal information. If you believe a child has provided information, contact us so we can review and delete it as required. We do not provide medical advice through Vera or our social channels. If a support message contains sensitive information, we limit its use to handling the request and any applicable legal or safety obligation.

13. Changes and contact

We update this notice when our practices change and revise the date above. Where required, we provide additional notice or obtain consent before a material change takes effect. Contact VITAL EXTEND LLC at info@vitalextend.com or 66 West Flagler Street, Suite 900, Miami, FL 33130, United States.