Home / Legal

Privacy Policy

What personal information VMA Social Media LLC collects, why we use it, who we share it with and the choices and rights you have.

Last updated: October 28, 2026  ·  Applies to: vmasocial.us and all services provided by VMA Social Media LLC.
Summary. We collect the information you send us through our contact form, the business information and account access needed to work for you, and basic technical data from our website. We use it to answer you, deliver and bill our services and keep our site secure. We do not sell personal information and do not share it for cross-context behavioral advertising. When we handle your customers’ data on your behalf, we act only as your service provider.

1. Who we are and scope

VMA Social Media LLC (“VMA Social Media”, “we”, “us”) is a digital services agency based at 1200 Brickell Ave, Suite 1950, Miami, FL 33131, United States. We are responsible for the personal information described in this Privacy Policy.

This policy applies to information collected through vmasocial.us, through email, phone, WhatsApp and video calls with us, and in the course of providing our services to business clients. It does not apply to third-party websites or Platforms (such as Instagram, TikTok or Google), which have their own privacy policies. Our use of cookies is explained in our Cookie Policy.

2. Information we collect

Information you give us

  • Contact form and inquiries: your name, company name, email address, phone or WhatsApp number, your website or social media profile, the services you are interested in (including any options you selected in our plan builder, such as posts per month or planned ad spend), your budget range and the content of your message.
  • Client business information: contact details of your team, brand assets, product and service information, business goals, content, customer testimonials and other materials you share so we can perform the services.
  • Account access: user roles, invitations and, only when a platform requires it, login credentials for your social media, ad, website, store, email, CRM or analytics accounts. We keep credentials confidential and use them only to perform the services.
  • Billing information: billing name, company, address, tax details, and invoice and payment history. Card and bank details are entered into and processed by our PCI-DSS compliant payment processor. We do not receive or store full card numbers.
  • Communications: emails, messages, call notes and meeting recordings (we will tell you before recording a call).

Information collected automatically

  • Server logs: when you visit our website, our hosting provider automatically records your IP address, browser type, device and operating system, pages requested, referring page, and date and time of the visit. We use these logs for security, troubleshooting and preventing abuse.
  • Cookies and local storage: our website currently does not set cookies or store information on your device, and we do not use analytics or advertising cookies. See our Cookie Policy.
  • Fonts: our pages load fonts from Google Fonts, so Google receives your IP address and browser information when a page loads.
  • WhatsApp: if you contact us using the WhatsApp button, the conversation takes place on WhatsApp, a service of Meta, and Meta processes your number and messages under its own privacy policy. We receive the messages and your number so we can answer you.

Information from other sources

We may receive information about you from people who refer you to us, from public business sources (such as your website or public social profiles) and from Platforms we manage on behalf of our clients, as explained in the next section.

We do not intentionally collect sensitive personal information (such as health, financial account, government ID, racial or ethnic origin, religious beliefs or precise geolocation) through our website. Please do not send it to us.

3. Data we process for our clients

When we manage social media, ads, websites, stores, email, SMS, WhatsApp, chatbots or CRMs for a client, we may access personal information about that client’s customers, followers, leads and website visitors, such as names, usernames, comments, messages, contact details, order information and analytics data.

For that data, our client is the business or controller, and we act as a service provider or processor. We process it only on the client’s instructions and only to provide the services, we do not sell it or use it for our own marketing, and we delete or return it when the engagement ends, as described in Section 16 of our Terms of Service. If you are a customer of one of our clients and want to exercise your privacy rights, please contact that business directly. If you contact us, we will forward your request to the client and assist them.

4. How we use information

  • To respond to your inquiry, schedule calls and prepare proposals.
  • To provide, manage and improve the services, including creating content, running campaigns, building websites and preparing reports.
  • To invoice you, process payments, prevent fraud and keep accounting records.
  • To communicate with you about your account, projects, changes to our terms and service updates.
  • To send you marketing emails or messages about our services, where allowed by law and with your consent where required. You can opt out at any time.
  • To operate, secure and troubleshoot our website and systems, and to detect and prevent spam, abuse and security incidents.
  • To comply with legal, tax and accounting obligations, respond to lawful requests and enforce our agreements.
  • To show completed client work in our portfolio, subject to the client’s right to opt out under our Terms of Service.

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

Where laws such as the EU or UK General Data Protection Regulation (GDPR), Brazil’s LGPD or similar laws apply, we rely on these legal bases:

  • Contract: to prepare a proposal at your request and to provide the services you hire.
  • Legitimate interests: to respond to business inquiries, operate and secure our website, improve our services, keep business records and send relevant business-to-business communications, always balanced against your rights.
  • Consent: for marketing messages where consent is required, and for any optional cookies we may add in the future. You can withdraw consent at any time.
  • Legal obligation: to keep tax and accounting records and respond to lawful requests from authorities.

6. How we share information

We share personal information only with the following recipients, and only as needed for the purposes in Section 4:

  • Service providers (processors) that work on our behalf under contracts that limit their use of the data, including our website hosting provider, email provider, payment processor, CRM, scheduling and video-call tools, project management and file storage tools, and design and content production tools.
  • Advertising and social Platforms (such as Meta, TikTok, Google and LinkedIn), when we use them to run our clients’ accounts and campaigns. Client data shared with these Platforms is shared on the client’s instructions and under the Platform’s terms.
  • Subcontractors such as designers, video editors, developers and creators who help us deliver a project, bound by confidentiality obligations.
  • Professional advisers such as accountants, auditors, lawyers, banks and insurers, under duties of confidentiality.
  • Authorities and legal process, when required by law, subpoena or court order, or when necessary to protect the rights, property or safety of our company, our clients or others.
  • Business transfers, to a buyer or successor in connection with a merger, acquisition or sale of all or part of our business, subject to this policy.

7. No selling or targeted advertising

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising, as those terms are defined under U.S. state privacy laws. We have not done so in the past twelve (12) months. We do not use personal information for profiling that produces legal or similarly significant effects.

8. How long we keep information

We keep personal information only as long as needed for the purposes described in this policy, then delete or anonymize it:

  • Inquiries that do not become clients: up to 24 months after our last contact, so we can follow up on the conversation.
  • Client contract, project and billing records: for the duration of the engagement and then up to seven (7) years, to meet tax, accounting and legal requirements.
  • Account access and credentials: removed or released when the engagement ends, and in any case within thirty (30) days after it ends.
  • Client audience data processed on a client’s behalf: as instructed by the client, and deleted or returned within thirty (30) days after the engagement ends, unless the law requires otherwise.
  • Server logs: generally up to ninety (90) days, unless needed longer to investigate a security incident.
  • Marketing lists: until you unsubscribe; we keep a record of your opt-out so we do not contact you again.

9. Security

We use reasonable administrative, technical and physical measures to protect personal information, including encrypted HTTPS connections, access limited to staff who need it, role-based access to client accounts instead of passwords when possible, two-factor authentication on our business tools, password managers for any shared credentials and providers that maintain recognized security standards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident that affects your personal information, we will notify you and the authorities as required by law.

10. U.S. state privacy rights

Residents of certain U.S. states, including California (CCPA as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Florida and other states with comprehensive privacy laws, may have some or all of the following rights, subject to legal exceptions:

  • Know and access: to confirm whether we process your personal information and to request a copy of it, including the categories of information, sources, purposes and recipients.
  • Correct: to request correction of inaccurate personal information.
  • Delete: to request deletion of personal information we collected from you.
  • Portability: to receive your information in a portable, readily usable format.
  • Opt out: of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising and certain profiling. As explained in Section 7, we do not engage in these activities.
  • Limit sensitive information: we do not use sensitive personal information for purposes that would require offering this right.
  • Non-discrimination: we will not deny services, charge different prices or provide a different quality of service because you exercised your rights.
  • Appeal: if we decline your request, you may appeal by replying to our decision. If we deny your appeal, you may contact your state attorney general.

In the past twelve (12) months we have collected the following categories of personal information, as described in Section 2: identifiers (name, email, phone, IP address); commercial and business information (company, service interest, budget range, purchase and billing history); internet activity (server log data); professional information (job role and company); and the content of your communications. We collected them for the purposes in Section 4 and disclosed them only to the recipients in Section 6.

To make a request, email legal@vmasocial.us or call +1 (305) 000-0000. We will verify your identity by matching information you give us with information we hold, and may ask for more details if needed. You may use an authorized agent, who must provide proof of your written permission. We respond within forty-five (45) days, and may extend this period once by another forty-five (45) days when reasonably necessary, with notice to you. Some of these laws exempt information collected in a business-to-business context; we will still consider every request in good faith.

11. Rights for international visitors

If you are located in the European Economic Area, the United Kingdom, Brazil, Mexico, Colombia, Argentina or another country with data protection laws, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent at any time without affecting earlier processing. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, email legal@vmasocial.us. We respond within thirty (30) days, or sooner if your local law requires it.

12. International transfers

We are based in the United States and work with clients in the United States and Latin America. Information you give us is stored and processed in the United States and, through our service providers, possibly in other countries. These countries may have data protection laws different from those of your country. When we transfer personal information internationally, we take steps to protect it as described in this policy, including contractual commitments from our service providers and, where required, standard contractual clauses or other lawful transfer mechanisms.

13. Marketing emails and text messages

Email. You can unsubscribe from our marketing emails at any time by using the “unsubscribe” link in any of them or by writing to hello@vmasocial.us. We process opt-outs promptly and in any case within ten (10) business days, as required by the CAN-SPAM Act. We will still send you transactional and service messages about your account, invoices and projects.

Text messages and WhatsApp. We send text or WhatsApp messages only to people who have given the required consent, such as clients and prospects who ask us to contact them that way. Message frequency varies, and message and data rates may apply. Reply STOP to any text message to opt out, or HELP for help. On WhatsApp, reply STOP or tell us you no longer want messages. Consent to receive messages is not a condition of buying any service. We do not sell or share mobile phone numbers or text messaging consent with third parties for their marketing purposes.

14. Do Not Track and Global Privacy Control

There is no common industry standard for “Do Not Track” browser signals, so our website does not respond to them differently. We do honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale or sharing of personal information and targeted advertising for that browser. Because we do not sell or share personal information or use advertising cookies, our site already operates as if that request had been made.

15. Children

Our website is not directed to children under 13, and our services are offered only to businesses represented by people who are at least 18 years old. We do not knowingly collect personal information from children under 13, or from anyone under 18 through our forms. If you believe a child has given us personal information, contact us and we will delete it. We do not create campaigns that target children under 13, and client campaigns must follow the Children’s Online Privacy Protection Act (COPPA) as described in our Acceptable Use & Content Policy.

16. Changes to this policy

We may update this Privacy Policy when our practices, services or the law change. The “Last updated” date at the top shows the latest version. If we make material changes, such as using personal information for a new purpose or adding analytics or advertising cookies, we will post the updated policy here and notify active clients by email before the change takes effect, and ask for consent where required.

VMA Social Media LLC
1200 Brickell Ave, Suite 1950, Miami, FL 33131, United States
Email: legal@vmasocial.us
Phone: +1 (305) 000-0000

We respond to written requests within thirty (30) days, unless this document states a different period.

Related: Terms of Service · Privacy Policy · Refund & Cancellation Policy · Acceptable Use Policy