Privacy Policy
Last updated: March 11, 2026
Introduction
VisuStock is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store and protect your information when you use our creative content marketplace platform.
Data We Collect
Account Data
- Email address (used for authentication and communication)
- Username / display name
- Password (stored securely via Supabase Auth, never in plaintext)
- Optional profile information (avatar, store name, country)
- PayPal email (for sellers receiving payouts)
Login & Session Data
- Authentication tokens (JWT, managed by Supabase Auth)
- Login timestamps and session duration
- OAuth provider data if you sign in with Google
Usage Data
- Pages visited and time spent
- Search queries and content interactions
- Purchase and download history
- Uploaded content metadata
Technical Data
- IP address
- Browser type and version
- Operating system
- Device information
Why We Collect Your Data
We use your data to:
- Create and manage your account
- Authenticate your identity and secure your sessions
- Process purchases and manage transactions
- Pay sellers for their content sales
- Personalize your browsing experience
- Communicate with you (support, order confirmations, platform updates)
- Prevent fraud and ensure platform security
- Comply with legal and accounting obligations
- Improve and optimize platform performance
How We Store & Protect Your Data
Your data is stored securely using the following measures:
- All data is hosted on Supabase infrastructure with encryption at rest and in transit (SSL/TLS)
- Passwords are hashed using industry-standard algorithms — we never store plaintext passwords
- Authentication uses secure JWT tokens with automatic expiry
- Row-Level Security (RLS) policies ensure users can only access their own data
- Original uploaded content is stored in private storage buckets, inaccessible to the public
- Signed URLs with 15-minute expiry are used for temporary access during processing
- Service role keys are never exposed to the client
- Regular security audits and integrity scans are performed
Data Sharing
We never sell your personal data. We may share your information with:
- Payment processors (PayPal) for transaction processing
- Supabase for hosting and database services
- Legal authorities if required by law
All our partners are contractually required to respect the confidentiality of your data and use it only for specified purposes.
Your Rights
In accordance with GDPR and applicable data protection laws, you have the following rights:
Right of access: Request a copy of all personal data we hold about you
Right to rectification: Correct inaccurate or outdated personal data
Right to erasure: Request deletion of your account and associated data
Right to portability: Receive your data in a structured, machine-readable format
Right to object: Object to the processing of your data for specific purposes
Right to restriction: Request limitation of how we process your data
Account deletion: You can delete your account at any time from your dashboard settings. Upon deletion, we will remove your personal data within 30 days, except where retention is required by law.
To exercise any of these rights, contact us at contact@visustock.com
Data Retention
- Account data: retained while your account is active, deleted within 30 days of account deletion
- Transaction data: 10 years (accounting and tax obligations)
- Support data: 3 years after resolution
- Security audit logs: 2 years
Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. For more details, see our Cookie Policy.
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or for legal reasons. We will notify you of significant changes by email or via a notice on our platform.
Contact
For any questions regarding this privacy policy or your personal data:
Email: contact@visustock.com
Address: 27 Place de la Madeleine, 75008 Paris, France