Privacy

How Vayna collects, uses, and protects information from our website visitors and customers.

Who operates Vayna

Vayna is operated by Glo Light Media LLC.

What we collect

From visitors: name, email, optional phone, business name, website, service interest, and message content submitted through a form. A Lead Leak Check request also records the page and campaign that led you to it (the campaign tags in the link and the referring site), the wording you agreed to and when, and whether you chose any optional marketing email. From customers: business profile, service area, authorized lead/contact data, integration credentials stored as references only, and billing information processed by Stripe -- Vayna never stores card numbers.

How we use it

To operate the service a customer purchased, to respond to inquiries submitted through public forms, and to meet legal, security, and fraud-prevention obligations. A request you send is read by a person, who replies by the email or phone you gave. We send no marketing email unless you ask for it separately, and nothing is sent to your customers from a form. We do not sell personal information, and we do not use customer contact data to train third-party AI models.

Who we share it with

Only the service providers that operate the product (hosting, payments, email delivery, and the AI model behind Vayna's internal review assistant), and only for that purpose. We never share one customer's data with another customer.

Analytics and cookies

Website analytics run on a self-hosted tool that does not sell or share data with ad networks, and the public site does not use advertising or cross-site tracking cookies. To trace a request back to the page that led to it, your browser keeps the campaign tags and referring site of your first page in session storage until you close the tab; it holds no personal details. The customer dashboard uses a sign-in cookie for signed-in users.

Your rights

Request access, correction, export, or deletion of your personal information at [email protected]. Every request becomes an owned, tracked internal request with a verification step before anything is exported, corrected, or deleted.

Retention

We keep data for as long as an account is active plus what's required for financial, legal, and audit obligations, then delete or anonymize it.

Contact method

Privacy questions or data requests: [email protected]. General questions: the Contact page.