Privacy Policy
Last updated:
This Privacy Policy explains what personal data Virtolex (the "Service") collects, how we use it, and your choices.
1. Data we collect
Account data: email address and a username (you may provide these directly or via Google / X sign‑in, in which case we receive only what the provider returns — typically a stable user id, display name, and, for some providers, an email).
Usage and technical data: IP address, browser and device information, request logs, and basic interaction events necessary to operate, secure, and debug the Service.
Payment data: handled by payment providers (e.g. Stripe). We receive a transaction reference and status, not your full card details.
2. How we use data
To authenticate you, provision and operate the Service, process purchases, detect abuse and fraud, comply with legal obligations, and respond to support requests.
We do not sell your personal data and do not use it for advertising profiling.
3. Sharing with third parties
Identity providers (Google, X) — when you choose to sign in with them; the data they share with us is governed by their respective privacy policies.
Payment processors — to process purchases.
Infrastructure providers — hosting, CDN, and email delivery, processing data on our behalf under appropriate safeguards.
4. Cookies and local storage
We use strictly necessary cookies and local storage to maintain your session and remember UI preferences. We do not use third‑party analytics cookies in the default configuration.
5. Retention
We keep account data for as long as your account is active, plus a limited period afterwards for legal, audit, and abuse‑prevention reasons. Logs are kept for the time needed to investigate security and reliability issues.
6. Your rights
You may access, correct, export, or delete your account and the personal data we hold about you. To exercise these rights, contact [email protected].
You may revoke a third‑party identity provider’s access at any time through that provider’s settings page; you will still be able to sign in with email/password if it was set.
7. Children
The Service is not directed at children under 18, and we do not knowingly collect their personal data.
8. Changes
We may update this Policy. Material changes are announced in the Service or by email; the date above always reflects the current version.
9. Contact
Questions or requests under this Policy: [email protected].