Privacy Policy
Last updated: October 30, 2026
This policy explains what data MyVM, a service of VM Services (Panama), handles when you use the app on your vending machine, the app.myvm.app portal, the phone app and this website.
Who we are
MyVM is a service of VM Services, based in Panama. The business data you load into MyVM (your users, machines, products and sales) belongs to you: we process it on your behalf to provide the service.
Controller and processor
Your company is the controller of the data from its operation: it decides what to load, who has access and what it is used for. MyVM acts as the processor: it handles that data only to provide the service and following your instructions.
MyVM is the controller only of your company’s contact and billing details and of whatever you write to us.
Information we collect
Account: name, email, role and company of each user. Passwords are stored only as an encrypted hash; no one at MyVM can see them.
Machine operation: sales (product, amount, payment method and time), inventory by lane, prices, combos, controller events and faults, and technical details of the tablet and controller (model, version and identifier).
Yappy payments: the credentials of your Yappy Comercial group, stored encrypted on our servers or in the tablet’s secure storage, and the reference of each payment.
Notifications: your phone’s notification identifier, so we can send you alerts.
Ads and photos: the files you upload and which ad was shown, on which machine and when.
Contact: whatever you send us by WhatsApp or email.
People who buy at the machine
We do not ask buyers for their name, email or phone. Cash sales record no personal data. With Yappy, the payment happens in Banco General’s Yappy app and we only receive the payment status and reference.
How we use your information
To run the service: selling, syncing machines, showing reports, sending alerts and applying the changes you make remotely. Also to provide support, bill, keep things secure and improve MyVM.
We do not sell your data or use it for third-party advertising. We may use aggregated, anonymous statistics that identify neither your company nor anyone else to improve the product.
Separation between companies and support
Each company sees only its own data. The MyVM team may enter your account in support mode only to help you, fix a fault or comply with the law, and every access is logged.
Storage and security
Data is stored on Google Cloud and travels encrypted (HTTPS). Servers may be located outside Panama. The machine keeps its sales locally so it can sell without internet and uploads them when the connection returns.
We apply reasonable security measures, but no system is infallible. If we detect an incident affecting your data, we will let you know without undue delay.
This website is hosted on Vercel and uses no tracking cookies or analytics tools.
Who we share data with
Only with the providers we need to operate: Google Cloud (servers), Vercel (this website), Banco General through Yappy (payments) and Expo, Apple and Google (phone notifications). Also with authorities when the law requires it.
How long we keep it
For as long as your account is active. If you end the service, you can ask for an export of your data within the following 30 days; after that we delete or anonymize it, except what the law requires us to keep (billing records, for example).
Sales stored on the tablet stay on that device until the app is erased or reinstalled.
Your rights
Under Panama’s Law 81 of 2019, you can request access, correction, deletion, objection and portability of your data by writing to privacidad@myvm.app. We will reply within the time limits set by law and, if you are not satisfied, you may go to ANTAI, Panama’s data protection authority.
If your request concerns data that a client company loaded into MyVM, we will forward it to that company, as the controller, and help it respond.
Minors
MyVM is a service for businesses and is not directed at minors.
Changes to this policy
If we make important changes, we will let you know in the portal or through the contact details you gave us before they take effect.
Contact
Privacy and rights over your data: privacidad@myvm.app.