Privacy Policy

Effective Date: March 1, 2026

1. Information We Collect

We collect the following types of information:

Personal Information

  • Email address (for account creation and communication)
  • Name (optional, if provided)
  • Payment information (processed securely through Stripe)

Social Media Data

  • Publicly available social media profiles
  • User-uploaded social media data archives
  • Content analysis results and risk assessments

2. How We Use Your Information

We use your information to:

  • Provide our social media audit services
  • Generate risk assessment reports
  • Communicate with you about your account
  • Process payments
  • Improve our services
  • Comply with legal obligations

3. Data Storage and Security

We implement industry-standard security measures including:

  • Encryption of data in transit and at rest
  • Regular security audits and updates
  • Limited access to personal information
  • Secure data centers with physical security measures

4. Data Retention

We retain your data as follows:

  • Account information: Until you delete your account
  • Scan results: 90 days after generation
  • Payment records: As required by law (typically 7 years)
  • Social media data uploads: Automatically deleted after processing

5. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers (e.g., Stripe for payments, AWS for hosting)
  • Legal authorities when required by law
  • Partner attorneys (only with your explicit consent for Premium tier)

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Opt-out of marketing communications
  • Lodge a complaint with your local data protection authority

7. GDPR Compliance

For users in the European Union, we comply with GDPR requirements including:

  • Lawful basis for processing (consent or legitimate interest)
  • Data minimization principles
  • Right to erasure ("right to be forgotten")
  • Data portability
  • Privacy by design

8. CCPA Compliance

For California residents, we provide additional rights under CCPA including:

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell data)
  • Right to non-discrimination

9. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email or through our website.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

  • Email: privacy@visashield.com
  • Data Protection Officer: dpo@visashield.com