Privacy policy

This policy says what Vicinto collects, why, who receives it, who can see it and how to get it deleted. Vicinto puts courts on a map, not people. It shows no advertising and it does not sell your data.

Effective as of October 10, 2026.

California Notice at Collection/State Privacy Rights Notice: See the State privacy rights notice section below for important information about your rights under applicable state privacy laws.

Dean Chohan, an individual doing business as Vicinto ("Vicinto," "we", "us" or "our") provides a map of basketball, soccer, tennis and pickleball courts with pickup games and tournaments that people post and join. This Privacy Policy describes how Vicinto processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website, mobile application, and social media pages) as well as our marketing activities, live events and other activities described in this Privacy Policy (collectively, the "Service").

Personal information we collect

Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:

• Contact data, such as your first and last name, email address, and phone number.
• Profile data, such as the password that you may set to establish an online account on the Service, date of birth, biographical details, photograph or picture, links to your profiles on social networks, interests, preferences, and any other information that you add to your account profile.
• Communications data based on our exchanges with you, including when you contact us through the Service, social media, or otherwise.
• Transactional data, such as information relating to or needed to complete your orders on or through the Service, including order numbers and transaction history.
• User-generated content and input data, such as photos, images, comments, questions, messages, works of authorship, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources. We may combine personal information we receive from you with personal information falling within one of the categories identified above that we obtain from other sources, such as:

• Service providers that provide services on our behalf or help us operate the Service or our business.
• Third-party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service. On Vicinto these are Sign in with Apple and Sign in with Google.

Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:

• Device data, such as your computer or mobile device's operating system type and version, browser type, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, and general location information such as city, state or geographic area.
• Online activity data, such as pages or screens you viewed, the website you visited before browsing to the Service, information about your activity on a page or screen, and access times.
• Precise geolocation data when you authorize our mobile application or the Service to access your device's location.

For more information concerning our automatic collection of data, please see the Tracking & Other Technologies section below.

Data about others. A team captain who enters a team in a tournament gives us the team's name and the names or handles of its players. Please do not refer someone to us or share their contact details with us unless you have their permission to do so.

What that means on Vicinto

The list above is the general one. Here is what Vicinto collects, feature by feature.

Account. Your email address or phone number, used to sign in, or the identifier Apple or Google shares when you sign in with them, together with the name and email address they pass along. If you set a password we store only a hash of it. Sign-in is run by Supabase on our behalf. Sign-in codes are texted by Twilio. The sign-in screen runs Cloudflare Turnstile, a check that tells a person from a script.

Date of birth. We ask for it once, after your first sign-in, to apply the age rules. A date that makes you younger than 13 is refused and is not stored. We show you the date you entered so you can correct a slip. If you confirm it, the account is removed. Otherwise we store the date and use it only to work out whether you are 18 or older. It is never shown to anyone, including hosts, and the apps cannot read it back.

Profile. Your name, an optional photo, the sports you play and your level in each and, if you are 18 or older and choose to add them, a short bio and an Instagram handle.

Games and content. The games and tournaments you post (sport, court, time, notes, price) and the ones you join, the teams you enter, the messages and photos you send in a game's chat and, for adults, in direct messages, and the reports you file about other members or their content. The members you block are recorded so the block can work.

Payments. When you pay to join a game or enter a tournament, Stripe collects your card details directly. They never touch our servers and we never see your card number. We receive a confirmation, the amount and a transaction reference, and we keep a record of the entry (game, amount, status and pass code) so the organizer can see who paid and you can see what you bought. Organizers who take payments set up their own Stripe account. The identity and bank details Stripe asks for go to Stripe, not to us. To start that setup we pass Stripe the name on your profile, your email address, your phone number and your social media link when we have them, and we keep the identifier of your Stripe account and whether it can take payments.

Facility claims. When you claim a listing we record your account, the role you state, how you verified, and the business email address or the masked phone number the code went to. The code is stored only as a hash and expires soon after it is sent. A claimed listing shows a "Verified facility" mark. Your name and photo are not shown on it. The details and photos you add to the listing are public.

Reservations. When you reserve a court, we record the facility, the court, the time, how many are playing, the note you leave for the desk, the price and how it is paid, your reservation code, when you were checked in and any cancellation and its reason. The facility's team sees your name, your reservation and your note so they can check you in. We send you a reminder notification the day before and two hours before your time. For a court paid in the app, Stripe collects the payment as described under Payments and the facility is the seller.

Facility teams. If you join a facility's team, we record your account, your role (owner, manager or staff), who invited you and when, and any invite codes you make, which expire after seven days. Your name and photo are shown to the rest of that team. The specials a team posts are public.

Location. With your permission, the map uses your device's location to center on where you are, to mark your own position with a dot that only you can see, and to sort courts and games by distance, while the app or the page is open. Your position is used on your device. The current apps do not send it to our servers, do not store it there and do not show it to other members. There is no background tracking. Your device requests map tiles directly from OpenFreeMap, which shows OpenFreeMap the part of the map you are looking at. Accounts created on an earlier version of Vicinto may have a location saved from that version. On October 5, 2026 we removed it from every profile and moved it to a closed archive that no member and no app can read. It is not updated or used, and it is deleted with the account.

Courts you use. The courts you save, your check-ins and the condition reports you file. A check-in records the court, the sport and the time against your account. It counts toward the number shown at that court for two hours and is shown to others only as that number, never with your name. A condition report (its kind and an optional note) shows on the listing for 14 days without your name. Both stay in our records, tied to your account, until you delete your account.

Notifications. The notices the service writes for you (a player joined your game, an entry was paid, a game you are in changed) are kept with your account and shown only to you. If you allow push notifications on iPhone, we store a device push token, the platform and your device's time zone so Apple can deliver them, and short diagnostic records of the registration. Turn push off at any time in iOS Settings. We delete the token when you sign out or delete your account.

Product analytics and diagnostics. To understand how Vicinto is used and to fix problems, we record a small set of actions against your account, such as signing in, posting a game, joining one or starting a checkout, and basic error reports (the error text, the page path and the browser or device type). This is first-party only: it stays in our own database, is not sold or shared with advertisers, and is not used to track you across other apps or websites. Records tied to your account are deleted with it. Page views on vicinto.com and app.vicinto.com are counted with Vercel Web Analytics, which does not use cookies.

Camera and photos. The iPhone app uses the camera only to scan the QR code on a pass at check-in, and your photo library only when you pick a photo to upload. Photos you choose to upload (a profile photo, a game or facility photo, a photo in a chat) are stored at web addresses that anyone with the address can open.

On your device. The websites and the app keep small amounts of data on your device, such as your city and sport filters, recently viewed courts and when you last read a chat, so they load fast. The iPhone app keeps your sign-in in the iOS Keychain. The Cookie Notice lists what the websites keep in your browser.

Tracking & Other Technologies

Cookies and other technologies. Some of our automatic data collection is facilitated by cookies and other technologies. For more information, see our Cookie Notice. We will also store a record of your preferences in respect of the use of these technologies in connection with the Service.

For information concerning your choices with respect to the use of tracking technologies, see the Your choices section of our Cookie Notice.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations. We may use your personal information to:

• provide the Service;
• enable security features of the Service;
• establish and maintain your user profile on the Service;
• facilitate social features of the Service, such as providing chat or messaging functionality;
• communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;
• communicate with you about events or contests in which you participate; and
• provide support for the Service, and respond to your requests, questions and feedback.

Service personalization, which may include using your personal information to:

• understand your needs and interests;
• personalize your experience with the Service and our Service-related communications; and
• remember your selections and preferences as you navigate webpages.

Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, and to develop new products and services. For more information on analytics, see our Cookie Notice. For example, we use Vercel Web Analytics, which does not use cookies, and our own first-party record of actions in the Service for this purpose.

Compliance and protection. We may use your personal information to:

• comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
• audit our internal processes for compliance with legal and contractual requirements or our internal policies;
• enforce the terms and conditions that govern the Service; and
• prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

Data sharing in the context of corporate events, we may share certain personal information in the context of actual or prospective corporate events - for more information, see How we share your personal information, below.

To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you and we will not attempt to reidentify any such data. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including analyzing and improving the Service and promoting our business.

Further uses, in some cases, we may use your personal information for further uses, in which case we will ask for your consent to use your personal information for those further purposes if they are not compatible with the initial purpose for which information was collected.

What we do not do

• We do not sell your personal information, and we do not share it with advertisers.
• We show no advertising, and we do not track you across other sites or apps.
• We do not store your card details.
• We do not use your date of birth for anything but the age rules.
• We do not put people on the map.
• We do not send marketing emails or marketing texts.
• We do not use your information to train AI models.

Retention

We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, establishing or defending legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

When we no longer require the personal information, we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.

Deleting your account

You can delete your account yourself at any time, in the app (Profile, Settings, Delete account) or at app.vicinto.com/account/delete. No email is needed. Deletion removes, right away: your profile and date of birth, the games and tournaments you posted, your joins, entries and passes, your chats, your saved courts, check-ins and condition reports, your facility claims, the photos you uploaded, your notifications and push token, and the analytics and error records tied to your account.

What stays: the record of a payment stays with Stripe and with the organizer you paid, in the organizer's own Stripe account, for as long as their legal and accounting duties require. Reports that other people filed about your account are kept for safety with your identifier removed. Copies in routine backups kept by our hosting provider are overwritten on that provider's schedule.

A host or organizer with paid entries that are not yet settled has to refund them, or let the game be played, before the account can be deleted.

How we share your personal information

We may share your personal information with the following parties (or as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection).

Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, email delivery, and website analytics).

Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such as Stripe. Stripe may use your payment data in accordance with its privacy policy, https://stripe.com/privacy.

Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so.

Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share your personal information with that third-party service. The third party's use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.

Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, in the course of the professional services that they render to us.

Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.

Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Vicinto, financing of Vicinto, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares). For example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Vicinto as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.

Other users and the public. Your profile and other user-generated content and input data (except for messages) may be visible to other users of the Service and the public. For example, other users of the Service or the public may have access to your information if you chose to make your profile or other personal information available to them through the Service, such as when you provide comments, reviews, survey responses, or share other content. This information can be seen, collected and used by others, including being cached, copied, screen captured or stored elsewhere by others (e.g., search engines), and we are not responsible for any such use of this information.

Our service providers

These are the companies that process personal information for Vicinto today, and what each one does.

• Supabase. The database, sign-in, file storage and the server functions that run the service, hosted in the United States.
• Vercel. Hosting for vicinto.com and app.vicinto.com, and Vercel Web Analytics, which counts page views without cookies.
• Stripe. Card payments, payouts to organizers and the identity checks Stripe requires before it pays an organizer.
• Twilio. Text messages and voice calls: sign-in codes, pass links and facility claim codes.
• Resend. Email delivery: passes and facility claim codes.
• Expo. Delivery of updates to the iPhone app. When the app starts it asks Expo whether newer app code is available. Expo receives your IP address, the app version, the iOS version and a random number that identifies the installation. It receives nothing from your account.
• Cloudflare. Turnstile, the check on the sign-in screen. Cloudflare receives your IP address and browser details when that screen loads.
• Apple. Sign in with Apple and the Apple Push Notification service. An Apple Wallet pass is made by us and added to Wallet by your own device when you choose to add it.
• Google. Sign in with Google.
• OpenFreeMap. Map tiles. Your device asks OpenFreeMap for them directly, so OpenFreeMap sees your IP address and the area of the map you are viewing.
• Anthropic. Claude, the AI model that runs the safety check on chat messages and photos (see Safety checks on chats) and checks court listings for mistakes. Anthropic deletes what we send within 30 days, unless a message breaks its usage policy or the law requires it to keep it longer, and does not train its models on it.

Supabase, Vercel, Twilio, Resend, Expo and Anthropic act on our instructions. Stripe, Apple, Google, Cloudflare and OpenFreeMap also handle the data they receive under their own privacy policies. There are no advertising networks, no data brokers and no advertising or analytics software kits in the iPhone app.

Safety checks on chats

Members can be 13 or older, so every message and photo sent in a game chat or a direct message is checked automatically before the other people in the chat see it. The check runs on Claude, an AI model made by Anthropic. It reads the message, the photo if there is one, and two facts about the chat: whether it includes members under 18 and whether the sender is under 18. It does not receive your name, your phone number, your email address or your date of birth. Most messages pass in a second or two.

A message the check flags (for example sexual content, an adult seeking private contact with a teenager, threats, slurs, harassment, someone else's address or phone number, or a scam) is held for review. It is taken out of the chat, you get a notice that it is held, and a person at Vicinto reads it and either puts it back in the chat or keeps it out. A photo that cannot be checked is held the same way. If the check is not available, your message is delivered and checked as soon as it is; a message flagged then is held the same way.

For each message we keep a record of the check: when it ran and what it decided, not the message. Held messages and the decision on them are kept for safety, also after the account that sent them is deleted, in the same way as reports about an account.

Who can see what

Court listings are records about places (a park's name, address, hours and courts), not about people.

A game's or a tournament's page can be opened by anyone with the link. It shows the sport, the court, the time, the number of players and the host's first name and photo. Signed-in members also see the first names and photos of the players who joined, unless a player has turned that off or is under 18, in which case they are counted, not named. A team's name and the names of its players show on the tournament page. Hosts and organizers see who joined and who paid.

Your profile shows your name, your photo, your sports and levels, the games you host and, if you added them, your bio and Instagram handle. A profile page can be opened by anyone with its link. A member under 18 has no profile that others can open, except as the host of a game, which shows their first name and photo.

A game's chat is visible to the people in the game and its host. Direct messages are visible only to you and the other person. Your email address, your phone number and your date of birth are never shown to other members. A claimed listing shows a "Verified facility" mark and the facility's own details. The person who claimed it is not named on it, and neither are the managers and staff on its team. A reservation is shown to the person who made it and to the facility's team. The team sees your name and your note for the desk, never your phone number, your email address or your date of birth. Other members see only that a court is taken, not who holds it.

Your choices

In this section, we describe the rights and choices available to all users. Users who are located in certain U.S. states can find additional information about their rights below.

Access or update your information. If you have registered for an account with us through the Service, you may review and update certain account information by logging into the account.

Notifications and text messages. Turn push notifications off in iOS Settings, and choose which notices you get in the app's Settings. Reply STOP to any text message from Vicinto to stop texts. You can still sign in with email, Apple or Google.

Cookies and other technologies. For information about cookies and other technologies employed by the Service and how to control them, see our Cookie Notice.

Mobile location data. You can disable our access to your device's precise geolocation in your mobile device settings.

Privacy settings. We make available certain privacy settings on the Service, including options to control whether you are shown on the list of players in a game and which notifications you receive.

Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.

Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.

Delete your content or close your account. You can choose to delete certain content through your account. If you wish to request to close your account, please use Delete account as described in Deleting your account, or contact us.

Other sites and services

The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.

Security

We employ technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International data transfer

We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.

Vicinto is offered in the United States only, and our database is hosted in the United States.

Children

The Service is not intended for use by anyone under 13 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

We ask every new account for a date of birth and refuse, without storing it, a date that makes the person younger than 13. A person who confirms a date like that has their account removed at once. If you believe a child under 13 has an account, write to support@vicinto.com and we will remove it.

Members who are 13 to 17 cannot pay, cannot host anything that charges, cannot send or receive direct messages, join group chats or use friend requests, are not shown on lists of players or in any search for people, and have no bio or social media handles on their profile. They can join free games that are not marked 18 and over, use the chat of a game they joined (where every message and photo goes through the safety check), and host free games, where their first name and photo show as the host. The service enforces these rules using the date of birth, and they end on the member's 18th birthday. We do not show a member's date of birth or age to anyone.

Text messages

We send a text message only for something you asked for: a one-time sign-in code, a link to the pass for an entry you paid for, and, when you claim a facility, a verification code sent to the phone number already on that listing. We do not send marketing texts. We do not sell or share your phone number, or your consent to be texted, with anyone for their own marketing. Message and data rates may apply. Reply STOP to opt out and HELP for help. The full wording is in the SMS terms.

Court data

Court listings are built from OpenStreetMap, the Los Angeles County parks inventory, the California Protected Areas Database and public agency pages, plus what verified facilities add. They describe places, not people. We also use Claude, Anthropic's AI model, to look for duplicate listings, wrong sports, bad contact details and links that no longer work, and to find each park agency's own reservation page; every link it finds is opened and checked before it is used, and a person decides every change to a listing. To correct a listing, write to support@vicinto.com.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.

How to contact us

If you have questions about our practices or if you would like to exercise any privacy related right that may be available to you, please contact us via one of the methods listed below.

• Email: support@vicinto.com
• Mail: Dean Chohan, doing business as Vicinto, 10161 Park Run Drive, Las Vegas, NV 89145

State privacy rights notice

Except as otherwise provided, this section applies to residents of U.S. states to the extent they have privacy laws applicable to us that grant their residents the rights described below (collectively the "State Privacy Laws").

This section describes how we collect, use, and share Personal Information of residents of these states and the rights these users may have with respect to their Personal Information. Please note that not all rights listed below may be afforded to all users and that if you are not a resident of one of these states listed above, you may not be able to exercise these rights. In addition, we may not be able to process your request if you do not provide us with sufficient detail to allow us to confirm your identity or understand and respond to it. We ask you to send your request from the email address on your account. If your account has no email address, we will ask you for details about the account that only its owner would know.

For purposes of this section, the term "Personal Information" has the meaning given to "personal data", "personal information" or other similar terms and "Sensitive Personal Information" has the meaning given to "sensitive personal information," "sensitive data", or other similar terms in the State Privacy Laws, except that in neither case does such term include information exempted from the scope of the State Privacy Laws. In some cases, we may provide a different privacy notice to certain categories of residents of these states, in which case that notice will apply instead of this section.

Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and some State Privacy Laws do not provide these rights to their residents. Therefore, we may decline your request in certain cases as permitted by law.

Information. You can request the following information about how we have collected and used your Personal Information:

• The categories of Personal Information that we have collected.
• The categories of sources from which we collected Personal Information.
• The business or commercial purpose for collecting and/or selling Personal Information.
• The categories of third parties with which we share Personal Information.
• The categories of Personal Information that we sold or disclosed for a business purpose.
• The categories of third parties to whom the Personal Information was sold or disclosed for a business purpose.

Access. You can request a copy of the Personal Information that we have collected about you.

Appeal. You can appeal our denial of any request validly submitted.

Correction. You can ask us to correct inaccurate Personal Information that we have collected about you.

Deletion. You can ask us to delete the Personal Information that we have collected from you.

Opt-out.

Opt-out of certain processing for targeted advertising purposes. We do not process your personal information for targeted advertising purposes.

Opt-out of or appeal profiling/automated decision making. We do not use your Personal Information to engage in profiling or to perform automated decision-making that results in significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.

Opt-out of other sales of personal data. We do not sell your Personal Information within the meaning of State Privacy Laws.

Consumers under 16. We do not sell or share the personal information of consumers under 16 years of age. We do collect personal information from members who are 13 to 15, as the Children section describes. Note that we do not intentionally collect Personal Information from children under the age of 13.

Sensitive Personal Information. While we process certain categories of Sensitive Personal Information as described in this Privacy Policy, we do not process Sensitive Personal Information for the purpose of inferring characteristics about consumers under the CCPA.

Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the State Privacy Laws.

Exercising your right to opt-out of the "sale" or "sharing" of your Personal Information. We do not sell personal information, and we do not use services that deliver interest-based ads, so we do not "sell" or "share" your Personal Information as the State Privacy Laws use those words. There is nothing to opt out of, and a Global Privacy Control signal from your browser does not change how we handle your information. For more information about GPC, visit https://globalprivacycontrol.org/.

Exercising other state privacy rights. You may submit requests to exercise any of the other state privacy rights listed above via email to support@vicinto.com.

Verification of Identity; Authorized agents. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law.

Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent's identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Laws rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.

Information practices. The following describes our practices currently and during the past 12 months:

Sources and purposes. We collect all categories of personal information from the sources and use them for the business/commercial purposes described above in the Privacy Policy.

Retention. The criteria for deciding how long to retain personal information is generally based on whether such period is sufficient to fulfill the purposes for which we collected it as described in this notice, including complying with our legal obligations.

Deidentification. We do not attempt to reidentify deidentified information derived from personal information, except for the purpose of testing whether our deidentification processes comply with applicable law.

Personal information that we collect, use and disclose. We have summarized the Personal Information we collect, the purposes for which we collect it and the third parties to whom we may disclose it by reference below to both the categories defined in the "Personal information we collect" section of this Privacy Policy above and the categories of Personal Information specified in the CCPA (Cal. Civ. Code §1798.140). This chart describes our practices currently and during the 12 months preceding the effective date of this Privacy Policy. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.

Additional information for California residents.

Shine the light law. Under California's Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to support@vicinto.com. In your request, you must include the statement "Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.

We do not disclose personal information to third parties for their own direct marketing purposes.

Additional information for Nevada residents. Nevada residents have the right to opt-out of the sale of certain personal information for monetary consideration. While we do not currently engage in such sales, if you are a Nevada resident and would like to make a request to opt out of any potential future sales, please email support@vicinto.com.

Contact Us. If you have questions or concerns about our privacy policies or information practices, please contact us using the contact details set forth in the How to contact us section above.