Privacy Policy

1. Introduction

V2Stack ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Services").

By using V2Stack, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Files You Process (Image Tools)

We do not collect or store your files. All image processing operations (compression, conversion, resizing, etc.) are performed client-side in your browser using WebAssembly and modern browser APIs. Your files never leave your device unless you explicitly choose to use a server-side feature (clearly labeled when applicable).

For the small subset of operations that require server processing:

• Files are uploaded over encrypted connections (HTTPS)
• Files are processed immediately and deleted within 1 hour
• Files are never used for training or any secondary purpose
• Files are never shared with third parties

2.2 Analytics Data

We use Plausible Analytics to understand how people use V2Stack. This data is:

• Anonymized: No personally identifiable information is collected
• Aggregated: We see trends, not individual behavior
• Cookies-free: Plausible does not set cookies or use persistent identifiers
• GDPR compliant: Plausible is a European company compliant with GDPR

Analytics data includes: page views, referral sources, device types, and geographic regions (country-level only).

2.3 Account Information (Future Feature)

Currently, V2Stack does not require accounts. If we add optional accounts in the future for features like workflow saving, we would collect:

• Email address (for account authentication)
• Account preferences and settings
• Usage data (operations count, workflow history) for feature improvement

2.4 Contact Form Submissions

When you contact us via our contact form, we collect:

• Name
• Email address
• Subject and message content

This information is used solely to respond to your inquiry and is retained for 12 months for quality and training purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process your transactions and send related information
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and illegal activities
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

• Plausible Analytics: Website analytics (privacy-focused, GDPR compliant)
• Supabase: Database and authentication for premium accounts
• Stripe: Payment processing (PCI DSS compliant)
• Vercel: Website hosting and deployment

Each of these providers has been vetted for privacy and security compliance. We recommend reviewing their privacy policies for additional details.

5. Data Retention

• Processed files: Deleted within 1 hour (server-side operations only)
• Analytics data: Retained for 12 months
• Account data: Retained while your account is active, plus 12 months after deletion
• Contact form submissions: Retained for 12 months

6. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Contact us at vjchilaka9998@outlook.com to make a request.

6.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information.

6.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. Contact us to make a request.

6.4 Right to Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format.

6.5 Right to Opt-Out (CCPA)

California residents have the right to opt-out of the "sale" of personal information. We do not sell personal information as defined by CCPA.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Regular security audits and vulnerability assessments
• Access controls and authentication for internal systems
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to industry best practices.

8. Children's Privacy

V2Stack is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. International Data Transfers

V2Stack is based in the United States. If you access our Services from outside the US, your information may be transferred to, stored, and processed in the US. We have implemented appropriate safeguards (including Standard Contractual Clauses) for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: vjchilaka9998@outlook.com
• Company: V2Stack
• Response time: 24-48 hours

For privacy-specific inquiries, please include "Privacy" in your subject line.