Privacy Policy

Last updated: 7/26/2026

VidSpark (staging)(hereinafter "we") respects your privacy. This policy explains how we collect, use, and protect your personal data in line with applicable data protection laws.

1. Data we collect

• Account information: name, email, profile picture (via Google OAuth).
• Order information: name, email, phone number (optional), payment reference, order code.
• Purchase history: products, amounts, transaction date and time, file download logs.
• Technical: IP address (hashed), user agent, sign-in session cookie, cart cookie.
• Not collected: bank account numbers, card numbers — all payments are processed through our payment provider.

2. How we use it

• To process purchases and issue file download links.
• To support customers and send order confirmation emails.
• To prevent fraud, hashing IPs to monitor suspicious activity.
• To compile aggregate operational metrics (anonymized).

3. Sharing with third parties

We only share data with the parties necessary to operate the store:

• Google — OAuth sign-in authentication.
• Payment provider — payment processing and reconciliation.
• Resend — sending transactional emails (if enabled).
• Sentry — technical error logging, with PII excluded (if enabled).

Our database, file storage, and cache run on our own server infrastructure (we do not use third-party storage services for customer data).

4. Retention period

• Account information: until you request deletion.
• Orders: retained as required by applicable accounting regulations (after you delete your account, the data is anonymized).
• Access logs: up to 90 days.

5. Your rights

You have the following rights over your personal data:

• The right to be informed, to correct, and to delete your personal data.
• The right to request a copy of your data (download JSON in Settings).
• The right to withdraw consent (delete your account).
• The right to lodge a complaint with the relevant data protection authority.

6. Cookies

• cart — JSON of products in your cart (7 days).
• flash — temporary notifications (30 seconds).
• authjs.* — sign-in session (HttpOnly, secure).

7. Contact

For any request related to your personal data: the.zero2hero.team@gmail.com.