Privacy Policy

VCOS is a one-person product. There's no marketing team, no ad-tech stack, and no data warehouse behind it — just one lightweight, cookieless analytics tool to see whether visitors make it to checkout. Most of what would normally be "our systems" in a privacy policy is actually Lemon Squeezy's systems, because Lemon Squeezy runs checkout, billing, and delivery. This page explains exactly where that line sits.

Who handles what

This is the one structural thing worth understanding before anything else on this page: two different parties handle your data, and they're not the same thing.

Lemon Squeezy is a registered merchant of record, meaning they're the legal seller of the product on this transaction, not just a payment gateway. Their handling of your data is governed by their own privacy policy, not this one: lemonsqueezy.com/privacy.

What's collected, and why

At checkout (by Lemon Squeezy)

Your email address, billing details, and payment information are collected by Lemon Squeezy to process the transaction, send your receipt, deliver the handbook and repository access, and handle any tax obligations. VCOS does not directly receive or store your card number, billing address, or any other payment credential — that data lives in Lemon Squeezy's systems, not ours.

Your email, after purchase

The founder can see order data — including your email — in the Lemon Squeezy dashboard, the same way any seller using Lemon Squeezy can see their own orders. Occasionally, that email may be used directly and manually to reach out about product feedback or a v2.x update. There is no email marketing platform, no CRM, no separate exported list, and no automated sequence. It's one person, looking at the same dashboard Lemon Squeezy already gives every seller, sending an email by hand when there's something worth saying.

On the landing page itself

This site uses Plausible Analytics, a privacy-focused, open-source analytics tool, to understand whether the site is actually working — how many people visit, and whether they get as far as clicking through to checkout. Plausible does not use cookies, does not collect or store personal data, and cannot identify or track individual visitors across sessions, days, or other websites.

What Plausible sees on a page visit: the page URL, the referring site or search engine, an approximate country/region derived from IP address (the IP address itself is not stored), and general device/browser type. It aggregates this into anonymous traffic totals — there is no per-visitor profile.

In addition to that automatic pageview, this page fires three custom events, none of which include any personal information:

• Checkout click — fires when a "Get VCOS" button is clicked, recording only which button (nav, hero, launch offer, scratch card, pricing, or final) — not who clicked it.
• Scratch card started — fires the first time someone interacts with the scratch-card element.
• Scratch card revealed — fires once the launch code has been revealed. The discount code itself is never sent as part of this event.

No forms on this page submit data anywhere, and the website itself never sees whether a checkout click actually turned into a purchase — that record lives entirely in Lemon Squeezy, which remains the only party that processes payment or order data. The only other data-collecting step in the entire flow is the Lemon Squeezy checkout page, hosted on Lemon Squeezy's domain, not this one.

Cookies

This site does not set any cookies — including for analytics. Plausible is cookieless by design and does not use any persistent identifier to recognize repeat visitors. When you click through to checkout, you land on a page hosted by Lemon Squeezy, and that page may set its own cookies under its own policy — that's outside VCOS's control and covered by Lemon Squeezy's privacy policy linked above, not this one.

Retention

There's no separate VCOS database, so there's no separate VCOS retention schedule. Your order and email live in Lemon Squeezy's systems for as long as Lemon Squeezy's own retention policy keeps them — typically driven by their obligations as merchant of record (tax, fraud, and dispute records), not by anything VCOS decides. If you want specifics on how long Lemon Squeezy retains order data, their privacy policy is the authoritative source.

Requesting access or deletion

Since the data lives with Lemon Squeezy, the most direct route for anything covered by their systems — like deleting your payment records — is through Lemon Squeezy's own support channels. For anything specific to VCOS (for example, asking not to be contacted again, or asking what the founder holds outside the Lemon Squeezy dashboard, which in practice is nothing), email priteshkumar.sales@gmail.com and it'll be handled directly.

EU / UK (GDPR)

EU and UK buyers are very much a target market for VCOS, so GDPR most likely applies to purchases from those regions. Lemon Squeezy, as merchant of record, is the party actually processing payment data and is expected to handle GDPR obligations tied to that processing under their own policy. On the VCOS side, the practical exposure is small — cookieless analytics with no personal data, no ad tracking, no stored customer database — but "small" is not the same as "verified compliant." Plausible states that its analytics are compliant with GDPR, CCPA, and PECR without requiring a cookie consent banner, since no cookies or personal data are collected; that is Plausible's own representation about its product, not an independent legal opinion from VCOS.

What VCOS does not do

• Does not sell your data to anyone, under any circumstances.
• Does not share your data with advertisers.
• Does not share your data with any third party other than Lemon Squeezy, who processes it as the payment provider and merchant of record for this purchase, and Plausible, who processes anonymous, cookieless traffic data as described above.
• Does not run Google Analytics, Meta Pixel, advertising trackers, session recording, fingerprinting, or A/B testing tools on this site.
• Does not use analytics to build an individual visitor profile, and cannot connect a pageview or click to a specific person.