Privacy notice
Effective 24 August 2026. This notice is for getvram.com and email we receive. It is not a description of data inside your GPU or your containers. Those stay on your machines.
1. Controller
The controller is Santiago Lertora, trading as getvram, hello@getvram.com. There is no appointed Data Protection Officer and no separate company entity on this site as of the effective date. Privacy requests go to that address with subject “Privacy”.
If you are in the EU/EEA/UK, you may also complain to your supervisory authority (for example AEPD in Spain, ICO in the UK, CNIL in France). If you are in Argentina, you may contact the Agencia de Acceso a la Información Pública regarding Ley 25.326.
2. What this site does not do
- We do not run a hosted GPU, model registry, or account dashboard in the cloud for your workloads.
- We do not sell personal information as defined in the California Consumer Privacy Act (CCPA/CPRA). We do not share it for cross-context behavioral advertising. We have no “sale” or “share” to opt out of because we do not do those activities. The “Do not sell or share” request still works: write to hello@getvram.com and we will confirm in writing that we do not sell or share your data.
- As of the effective date we do not use Google Analytics, Meta Pixel, advertising cookies, or a marketing automation suite.
- We do not collect government ID, precise geolocation, or special-category data (health, biometrics, union membership, etc.) through this site.
3. Personal data we actually handle
| Data | When | Why (purpose) | Legal basis (GDPR Art. 6) | Kept |
|---|---|---|---|---|
| Email, GPU family you selected, use-case you selected, time of submit | Waitlist form on getvram.com | To write to you about a license or the MIT runtime if you asked us to | Consent (checkbox on the form). You can withdraw by emailing us. | Until you ask deletion, or 24 months after the last mail we sent you, whichever comes first. If the POST to /api/waitlist fails, a copy stays only in your browser (localStorage key gv_waitlist) until you clear site data. |
| Name, email, company, machine details, logs or screenshots you attach | You email hello@ or enterprise@ | License, support, or legal | Contract (Art. 6(1)(b)) if you have or want a license; otherwise legitimate interests in answering you (Art. 6(1)(f)), or consent if you are only on a mailing list. | Support thread: 36 months after close. License and invoice mail: 10 years where tax law requires (Argentina and any country we bill in). |
| Consent flag (whether you allowed Google Fonts), timestamp | Cookie banner | To remember your choice and to prove we asked (GDPR Art. 7) | Legitimate interests / legal obligation to record consent | 13 months in localStorage key gv_consent_v1, then we ask again if you return. |
| IP address, user-agent, URL, time | If the host (for example GitHub Pages, a CDN, or a VPS) keeps access logs | Security, abuse, billing of the host. We do not run our own analytics product on these logs as of this date. | Legitimate interests (security) | Whatever the host’s default is (often 1–90 days). We will name the host here when production DNS for getvram.com is fixed. |
The waitlist POST /api/waitlist is a same-origin attempt. On the public static site it usually fails. Then the script stores the payload in your browser only. We do not receive that copy unless you later email us or we add a real endpoint and say so here first.
Payment: if we invoice, we may use a bank or a payment processor. Their names and roles will be added to this table before we take card payments on the site. As of the effective date, licenses are arranged by email, not by a checkout form on getvram.com.
4. Google Fonts (optional)
If you click “Accept fonts”, your browser requests stylesheets and font files from Google (Google LLC, United States). Google may see your IP address and user-agent. That is an international transfer. We rely on your consent (Art. 6(1)(a) and Art. 49 if no adequacy). If you choose “Necessary only”, the site uses system fonts and does not call fonts.googleapis.com or fonts.gstatic.com from our pages.
5. Recipients
We do not sell lists. Recipients are: (a) Santiago Lertora; (b) the email provider that hosts hello@getvram.com (the provider’s name will be listed here once mail is in production; until then treat mail as received by the controller); (c) Google, only if you consented to fonts; (d) a host/CDN for the static site; (e) a lawyer or accountant if a dispute or tax filing requires it; (f) authority if a binding order says so.
6. Your rights (GDPR)
You can ask for access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests. You can withdraw consent without affecting prior lawful processing. We will answer within one month (extendable by two months for complex requests, we will tell you). We may need enough information to identify you (for example the email you used).
7. California (CCPA/CPRA)
We do not sell or share personal information. We do not use or disclose sensitive personal information for purposes other than those the CPRA allows without extra consent, because we do not collect that information on this site.
California residents may request: (1) the categories and specific pieces of personal information we have about you; (2) deletion; (3) correction; (4) a copy. We will not discriminate against you for exercising these rights. Send the request to hello@getvram.com from the email we have on file, or provide another way to verify you. You may use an authorized agent with written permission. We will reply within 45 days, extendable once by 45 days.
We do not have a financial incentive program for data.
8. Argentina (Ley 25.326)
If the data subject is in Argentina, processing of personal data follows Ley 25.326 and its regulations. You may request access, update, or deletion. The controller’s contact is hello@getvram.com. The data is not transferred for sale.
9. Children
The site is aimed at people who run GPU servers and developers. We do not knowingly collect data from children under 16. If you believe we have, email us and we will delete it.
10. Security
Email is not a perfect channel. Do not send passwords or private keys. The commercial software runs on your host; harden that host yourself. HTTPS for getvram.com depends on the TLS certificate of the host once DNS is live.
11. Changes
If we add analytics, a checkout, or a waitlist server that actually receives your form, we will update this notice and the effective date before that processing starts. Material changes will be linked from the site footer.