Privacy policy

1. Who we are

This website, grupo-vca.com, is operated by VCA Drums (Honduras): acoustic drum shields, remote audio services for churches, online courses, free audio tools, and photography and video. For any question about your data write to [email protected].

2. What data we collect and why

Data	When	Why
Account: name, email and, if you sign in with Google, your profile picture. Your password is managed by Firebase (Google); we never see it.	When you create an account or sign in	To give you access to your courses, your dashboard and the chat with our team.
Profile (optional): phone or WhatsApp, church or organization, country and city.	When you enter them in “My information”	To assist you better and coordinate sessions or shipments.
Courses and progress: unlocked courses, watched lessons and certificates (name, course, date and verification code).	When you use the courses	To show your progress and issue and verify certificates.
Payments: with PayPal we keep the order number, amount, currency, date and the name and email PayPal shares. We never see or store your card number. For bank transfer, N1co link or cash payments we record what you tell us (name and reference).	When you buy a course, a drum shield or a consultation	To confirm payment, unlock what you bought and keep our accounting.
Messages and files you send through the dashboard chat.	When you write or upload a file	To reply and support you. Only you and our team can see them.
Promotion codes: buyer's name or email, payment method, reference and the issued code.	When you buy a drum shield with a promotion	To issue and control the real quotas of the promotion.
Email to access the tools: your email, the tool where you left it, language, approximate country, date, the fact that you agreed to receive emails and, where needed, that you confirmed the 6-digit code we sent you to check the address is yours (the code is stored hashed and expires after 10 minutes).	When you type it on a tool's access screen (RTA analyzer, sound test and simulators)	To give you access, send you VCA Drums news, guides and promotions, and measure which tools people like. You can unsubscribe from any email or by writing to [email protected], and ask us to delete your email.
Sound test report (only if you press “Save my report”): name, church, email or WhatsApp, approximate country and the report's scores and findings. Never the audio.	When you save your report and tick the consent box	To keep your report and follow up on it (for example, an engineer review). We contact you by WhatsApp or email only about that report.
WhatsApp or email messages you send us.	When you contact us	To reply and handle your request.
Technical and usage data: pages visited, button clicks, tool starts, device and browser type, approximate country and IP address.	When you browse the site	To measure and improve the site, keep it secure and measure our advertising (Google Analytics and Meta Pixel).

3. Your audio is not recorded or sent

The spectrum analyzer (RTA) and the sound test use your device's microphone, but all analysis happens in your own browser. Audio is not recorded, not uploaded to the internet and does not pass through our servers. The analyzer settings and your best test score are stored only in your browser.

4. Who we share data with

We do not sell your data. To run the site we use providers that process data on our behalf:

• Google: Firebase Authentication (sign-in) and Google Analytics 4 (usage statistics).
• PayPal: processes card and PayPal account payments.
• Cloudflare: hosts the site and stores accounts, courses, messages, files and reports; also provides security and the approximate country of the visit.
• Meta: Meta Pixel to measure and optimize advertising; WhatsApp to assist you when you write to us.
• YouTube and Cloudflare Stream: play the course videos.
• CallMeBot (WhatsApp): sends us internal alerts, for example “new sound report from [name], score 72/100”.
• N1co: processes payments you make through its link.
• Email delivery provider (the email tool we use): receives your email to send you the messages you agreed to receive.

We may also share data if the law requires us to.

5. Cookies and browser storage

• Functional: your session (Firebase and vca_session), language (vca_lang), analyzer settings (vca_rta_prefs), your best test score (vca_st_best), the time used in the transfer function trial and, if you buy it, your access code and a device identifier (vca_tf_trial, vca_tf_unlock, vca_tf_dev) and the last coverage simulator project (vca_sim_project, only in your browser), and the fact that you already left your email so we do not ask again (vca_lead) and notices you dismiss during your visit.
• Analytics and advertising: Google Analytics (for example _ga) and Meta Pixel (for example _fbp). You can block them with your browser settings or a blocking extension; the site keeps working.

Analytics tools only run on the published site (grupo-vca.com), not in local tests.

6. How long we keep your data

As long as you have an account or it is needed to provide the service, meet legal and accounting obligations (for example payment records) and resolve claims. Saved sound reports are kept until you ask us to delete them. You can ask us at any time to delete your account and data.

7. Your rights

Under applicable law you can ask us to access your data, correct it, delete it, object to certain uses and withdraw your consent where we asked for it (for example, for the sound report). Write to [email protected] from the email linked to your account; we will reply within a reasonable time.

8. Security

The site runs over HTTPS. We verify your identity on every request to your account, the price of what you buy is set by the server, and course files are only delivered to those who have them unlocked. No system is 100% secure, but we work to protect your data.

9. Minors

Our services are not directed to children under 16. If you are a minor, use them with your parents' or guardians' permission.

10. International transfers

The providers listed above may process data outside Honduras, for example in the United States, under their own privacy and security policies.

11. Changes to this policy

If we update it, we will publish the new version here with its date. If the change is important, we will tell you through a visible notice on the site.

12. Contact

VCA Drums · Honduras · [email protected]