How we handle your data.

What we collect

Contact information: name, email address, and phone number. Captured when you fill out the quote form, when a rep records your sale, or when you sign in with Google on the portal.

Purchase information: the model you bought, the agreed price, recorded payments, sale / receipt / delivery / install dates, and the address where your unit will be installed (with map coordinates when you drop a pin).

Photos, videos, and documents: files you upload to the portal to show progress on your unit, open a service ticket, or attach to a message. They stay associated only with your sale.

Messages and tickets: the content of service tickets you open and the replies you send or receive through the portal.

Minimal technical data: push notification token (iOS), preferred email language, notification settings. We do not use advertising tracking cookies.

How we use it

To coordinate your sale, construction, delivery, and installation.

To send you transactional emails: welcome, payment confirmation, date reminders, construction alerts, ticket notifications.

So a rep can serve you on WhatsApp with full context about your unit.

To display the photos and documents you upload inside the portal, only to you and the Vagón team assigned to your sale.

To improve the portal and the app with anonymous performance metrics (which pages take longer to load, which errors occur). We do not combine these metrics with your identity.

Who we share it with

Our team: sales reps, contractors who install your unit, and authorized admins. Each member only sees the information needed to do their job.

Service providers: • Supabase — stores the database and portal files. • Resend — sends transactional emails on our behalf. • Vercel — hosts the website and portal app. • Apple — delivers push notifications to your iPhone and authenticates your session when you use Sign in with Apple. • Google — authenticates your session when you sign in with Google. • PostHog and Sentry — anonymous metrics and error reports.

We do not sell, rent, or share your data with advertisers or third parties for marketing. If a legal authority requires information through a valid process, we will comply with the applicable laws of Puerto Rico and the United States.

Where and how long we keep your data

Data lives on Supabase and Vercel servers in the United States. Portal files are kept in private storage: they are accessed only through temporary signed URLs we generate for you and the team.

We retain your information while your sale is active plus seven years after final delivery, to meet accounting and warranty requirements. After that period, you can request deletion of your account and personal data (see next section).

Your rights

You can:

• Access the information we hold about you on the portal (Anexos, Payments, Tickets sections). • Edit your install address, email language, and notification preferences from Settings on the portal. • Delete attachments you uploaded yourself, from the portal or app. • Request correction of incorrect data by email or WhatsApp. • Request deletion of your account and personal data once the retention period is complete. If your sale is active, we cannot delete your account without cancelling the sale first.

Exercising any of these rights does not affect the fulfillment of pending contractual obligations.

Minors

Vagón Puerto Rico is not a service directed at minors under 18. We do not knowingly request or collect data from minors. If we discover that a minor created an account without parent or guardian consent, we will delete that account.

Changes to this policy

If we materially update how we handle data, we will update the date at the top of this document and notify active buyers by email. Minor editorial changes do not require notification.

How to reach us

If you have questions or want to exercise any of the rights above, write to info@vagonpuertorico.com or call 939-248-7576. We respond within one to two business days.