Privacy Policy
Last updated: 2026-09-12
1. Local-first processing
Tools marked local or browser compute entirely inside your browser; your input and files are not uploaded to us. Tools marked hybrid process small inputs locally but upload files that exceed the size threshold for cloud processing. Tools marked cloud require server processing. Each tool page states its mode.
2. What we collect
- Account data: email, display name, hashed credentials, session identifiers.
- Usage data: tool-opened events and quota counts used to enforce limits and show popularity.
- Cloud files: files you choose to process in the cloud, plus related metadata.
- Billing data: subscription status and identifiers from Stripe; we do not store card numbers.
- Technical data: IP address, user agent and request metadata for security and rate limiting.
3. Cloud file retention
Free cloud results are ephemeral (download immediately). Pro cloud files, download links and task records follow the configured retention window of 30 days and can be deleted earlier at any time from your account.
4. Cookies and storage
- Essential: session and security cookies (httpOnly), plus a local preference for theme and cookie choice. These are required to operate the site.
- Advertising: if you consent, third-party advertising may load and may set its own cookies. If you decline or ignore the banner, ads are not loaded. You can change your choice at any time.
- Analytics: we record aggregated page-view and tool-usage counts to improve the product. We do not build advertising profiles from this data.
5. Legal bases (GDPR)
We rely on: performance of a contract (account and paid features), legitimate interests (security, abuse prevention, aggregated analytics), and consent (advertising).
6. Your rights
Depending on your region (GDPR, CCPA/CPRA, PIPL), you may have the right to access, correct, delete, export or restrict processing of your personal data, and to object to or withdraw consent for advertising. Export all data or permanently delete your account from Account → Privacy & data. We do not sell personal data.
7. International transfers
We use global infrastructure and subprocessors (see /subprocessors). Transfers rely on appropriate safeguards such as Standard Contractual Clauses where required.
8. Retention
Account data is kept while your account is active and deleted on request, subject to legal, tax and security obligations.
9. Children
The service is not directed to children under 14, and we do not knowingly collect their personal data.
10. Users in mainland China
We process personal data in accordance with the Personal Information Protection Law (PIPL). You may exercise your rights (access, copy, correct, delete, withdraw consent, and deceased-person rights where applicable) via the account page or the contact below. International transfer of personal data is carried out with your consent or other lawful basis; a separate consent is obtained where sensitive personal information or cross-border transfer rules require it.
11. Changes and contact
We will post material changes on this page. Questions, DPA or data requests: support@vecaria.com.