Privacy Policy

Vesura ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our automated escrow platform for UGC content transactions.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using Vesura, you consent to the practices described in this policy.

2.1 Information You Provide

• Account Information: Name, email address, password, profile picture
• Payment Information: Bank account details, billing address (processed by Stripe)
• Identity Verification: Government ID, business registration (when required)
• Content: Videos, images, and other files you upload
• Communications: Messages, support requests, feedback

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on Platform
• Device Information: IP address, browser type, operating system, device identifiers
• Location Data: Approximate geographic location based on IP address
• Cookies: See our Cookie Policy for detailed information
• Transaction Data: Payment history, escrow status, content delivery confirmations

2.3 Information from Third Parties

• Stripe: Payment processing and fraud prevention data
• Authentication Providers: OAuth login information (if you use social login)
• Analytics Providers: Aggregated usage statistics

We use your information for the following purposes:

3.1 Provide Our Services

• Process and secure escrow transactions
• Apply watermarks to protect content
• Facilitate content delivery and payment release
• Manage your account and preferences
• Provide customer support

3.2 Improve and Develop

• Analyze usage patterns to improve user experience
• Develop new features and services
• Conduct research and analytics
• Perform testing and troubleshooting

3.3 Safety and Security

• Detect and prevent fraud, abuse, and illegal activities
• Verify identity and prevent unauthorized access
• Enforce our Terms of Service
• Protect the rights and safety of users

3.4 Communications

• Send transaction notifications and updates
• Provide customer support responses
• Send important service announcements
• Send marketing communications (with your consent)

3.5 Legal Compliance

• Comply with legal obligations and regulations
• Respond to lawful requests from authorities
• Enforce our legal rights and protect against liability

Under GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Fraud prevention, service improvement, security
• Legal Obligations: Compliance with financial regulations, tax laws
• Consent: Marketing communications, optional cookies, data sharing with third parties

We do not sell your personal data. We may share your information with:

5.1 Service Providers

• Stripe: Payment processing and payout services
• AWS: Cloud storage for uploaded content
• Google Analytics: Website analytics (anonymized)
• Email Service: Transactional and marketing emails

5.2 Transaction Parties

• We share necessary information between creators and brands involved in transactions
• This includes contact information, content previews, and transaction status

5.3 Legal Requirements

• Law enforcement or government agencies (when legally required)
• Legal proceedings, court orders, or subpoenas
• Protection of our rights, property, or safety

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

We implement industry-standard security measures to protect your data:

• Encryption: Data in transit (TLS/SSL) and at rest (AES-256)
• Access Controls: Limited employee access on a need-to-know basis
• Regular Audits: Security assessments and penetration testing
• Secure Infrastructure: AWS with industry-standard security practices
• Payment Security: PCI-DSS compliant through Stripe
• Backup Systems: Regular backups with disaster recovery plans

However, no system is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our safeguards.

We retain your data for as long as necessary to:

• Active Accounts: As long as your account is active
• Transaction Records: 7 years (legal requirement for financial records)
• Uploaded Content: Until deleted by you or when no longer needed
• Support Communications: 3 years for quality assurance
• Marketing Data: Until you withdraw consent or 2 years of inactivity

After retention periods expire, we securely delete or anonymize your data.

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing or optional processing
• Right to Lodge a Complaint: File a complaint with your data protection authority

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

Your data may be transferred and processed outside the European Economic Area (EEA):

• AWS (Ireland): Primary data storage within EEA
• Stripe (US): Payment processing with Standard Contractual Clauses
• Google Analytics (US): Anonymized analytics data

We ensure that appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Data Processing Agreements with all third parties
• Regular compliance reviews

Vesura is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email notification for significant changes
• Requesting renewed consent when required by law

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

Supervisory Authority: If you are located in the EEA, you have the right to lodge a complaint with your local data protection authority.