Privacy Policy

1. Introduction

V2Stack (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the “Services”).

By using V2Stack, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Files You Process (Image Tools)

We do not collect or store your files. All image processing operations (compression, conversion, resizing, etc.) are performed client-side in your browser using WebAssembly and modern browser APIs. Your files never leave your device unless you explicitly choose to use a server-side feature (clearly labeled when applicable).

For the small subset of operations that require server processing:

• Files are uploaded over encrypted connections (HTTPS)
• Files are processed immediately and deleted within 1 hour
• Files are never used for training or any secondary purpose
• Files are never shared with third parties

2.2 Analytics Data

We use Plausible Analytics to understand how people use V2Stack. This data is:

• Anonymized: No personally identifiable information is collected
• Aggregated: We see trends, not individual behavior
• Cookies-free: Plausible does not set cookies or use persistent identifiers
• GDPR compliant: Plausible is a European company compliant with GDPR

Analytics data includes: page views, referral sources, device types, and geographic regions (country-level only).

2.3 Account Information (Future Feature)

Currently, V2Stack does not require accounts. If we add optional accounts in the future for features like workflow saving, we would collect:

• Email address (for account authentication)
• Account preferences and settings
• Usage data (operations count, workflow history) for feature improvement

2.4 Contact Form

The contact form on this site does not send your message to a server. It prepares an email in your own mail app, addressed to us, using the name, email address, topic and message you typed. Nothing is stored by this website. We only receive the message if you send that email, and we use it solely to reply to you.

2.5 Chat Assistant

The “Ask” chat assistant is run from a separate service at chat.v2stack.com. When you use it:

• A random anonymous ID and a conversation ID are created and saved in your browser’s local storage so your conversation can continue. They are not linked to your name or email.
• The messages you type are sent to chat.v2stack.com to generate a reply. To write it, the service passes your message, the last few messages of the conversation, and the page you are on to an AI model provider through OpenRouter. Providers are asked not to keep or train on the conversation. The conversation is also saved on your device so it is still there when you return, and a copy is kept on our service under the random ID.
• If you use the complaint form inside the chat, your name, email address and the details you enter are also sent to chat.v2stack.com so we can follow up.

Please do not put passwords, payment details or other sensitive information in a chat message. To stop the ID being used, clear this site’s data in your browser, or start a new chat from the chat window. To ask us to delete a conversation or a complaint you submitted, email us as described in Section 6.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process your transactions and send related information
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and illegal activities
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services:

• Plausible Analytics: Website analytics (privacy-focused, GDPR compliant)
• Supabase: Database and authentication for premium accounts
• Stripe: Payment processing (PCI DSS compliant)
• Vercel: Website hosting and deployment

Each of these providers has been vetted for privacy and security compliance. We recommend reviewing their privacy policies for additional details.

5. Data Retention

• Processed files: Deleted within 1 hour (server-side operations only)
• Analytics data: Retained for 12 months
• Account data: Retained while your account is active, plus 12 months after deletion
• Contact form submissions: Retained for 12 months

6. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. Contact us at expensemanagementvj@gmail.com to make a request.

6.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information.

6.3 Right to Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions. Contact us to make a request.

6.4 Right to Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format.

6.5 Right to Opt-Out (CCPA)

California residents have the right to opt-out of the “sale” of personal information. We do not sell personal information as defined by CCPA.

6.6 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Regular security audits and vulnerability assessments
• Access controls and authentication for internal systems
• Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but commit to industry best practices.

8. Children’s Privacy

V2Stack is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. International Data Transfers

V2Stack is based in the United States. If you access our Services from outside the US, your information may be transferred to, stored, and processed in the US. We have implemented appropriate safeguards (including Standard Contractual Clauses) for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date. You are advised to review this policy periodically for any changes.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: expensemanagementvj@gmail.com
• Company: V2Stack
• How we reply: by email, as soon as we can

For privacy-specific inquiries, please include “Privacy” in your subject line.