Privacy Policy

This Privacy Policy ("Policy") is part of the overall Agreement and explains how VIXVVO Tools ("VIXVVO," "we," "us," or "our") collects, uses, stores, and shares your information when you use our website and services at vixvvo.com (the "Services").

1. Information We Collect

1.1 Information You Provide

We collect personal information you enter on our site or provide to us directly, including:

• Name and email address (account registration)
• Password (stored securely via Firebase Authentication)
• Business information (company name, address, phone number)
• Payment information (processed securely by Stripe and/or Patreon — we do not store full card numbers)
• 3D printing data (models, orders, clients, filaments, printers, supplies, invoices)
• Files you upload (3D model files, images)
• Support tickets and FAQ content you create

1.2 Information Collected Automatically

When you use our Services, we may automatically collect:

• IP address and approximate location
• Browser type and version
• Device information and operating system
• Pages visited, time spent, and usage patterns
• Error and performance data (via Sentry for crash reporting)

1.3 Information from Third Parties

We may receive information from third-party services you connect:

• Patreon: Membership status, tier, and billing information when you connect your Patreon account
• Stripe: Subscription status and payment confirmation (not full card details)
• Etsy: When you connect your Etsy shop via OAuth, we access shop information (shop name, ID, currency), order/receipt data (order totals, items, quantities, statuses, buyer names, shipping addresses), listing data (titles, descriptions, images, pricing, inventory), and transaction details. Your Etsy password is never shared with or stored by VIXVVO — all authentication is handled through secure OAuth 2.0 (PKCE).

2. How We Use Your Information

2.1 Service Provision

To operate our Services, manage your account, process subscriptions, enforce tier limits, and provide customer support.

2.2 Personalization

To customize your experience, remember your preferences (currency, theme, workspace settings), and improve our platform.

2.3 Communication

To send transactional emails (verification, password reset), service announcements, and optional marketing communications. You may opt out of marketing emails at any time.

2.4 Security

To protect against unauthorized access, monitor for suspicious activity, and maintain the integrity of our Services. This includes two-factor authentication (2FA) verification.

2.5 Legal Compliance

To comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.

3. Data Storage & Security

3.1 Where We Store Data

Your data is stored using Google Firebase (Cloud Firestore and Cloud Storage), hosted in the United States. Authentication is handled by Firebase Authentication. Payment processing is handled by Stripe and Patreon.

3.2 Security Measures

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Firebase Security Rules restricting data access to authenticated users
• Secure password hashing (handled by Firebase Authentication)
• Two-factor authentication (TOTP) support
• Server-side verification for sensitive operations

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services that may process your data:

• Google Firebase — Authentication, database, file storage, cloud functions
• Stripe — Payment processing and subscription management
• Patreon — Membership and subscription management
• Sentry — Error monitoring and crash reporting
• Vercel — Website hosting and deployment
• Etsy (via Etsy API v3) — When you connect your Etsy shop, we access your shop data through the Etsy API. Data retrieved includes shop details, orders, receipts, transactions, listings, and buyer information. All API access is governed by the Etsy API Terms of Use.

We do not sell or trade personal information to outside parties for marketing purposes. We may share information with trusted third parties who assist in operating our business, so long as those parties agree to keep this information confidential.

5. Etsy Data Handling

5.1 What Etsy Data We Access

When you connect your Etsy shop to VIXVVO, we request only the minimum permissions needed to provide our services:

• Shop data: Shop name, shop ID, listing currency, and shop settings
• Order/receipt data: Order totals, items purchased, quantities, order statuses, estimated shipping dates, and payment information (amounts, not card details)
• Buyer information: Buyer names, shipping addresses, and buyer email (only if separately approved by Etsy)
• Listing data: Listing titles, descriptions, images, pricing, SKUs, inventory, and taxonomy
• Profile data: Your Etsy user profile information

5.2 How Etsy Data Is Used

Etsy data accessed through the API is used solely to:

• Import and display your Etsy orders in your VIXVVO dashboard
• Calculate costs, fees, and profit estimates for your Etsy sales
• Sync order statuses and tracking information
• Help you manage and create Etsy listings
• Provide business analytics and insights for your Etsy shop

We do not use Etsy data for advertising, marketing to third parties, analytics unrelated to your business, machine learning model training, or content scraping.

5.3 How Etsy Data Is Stored

Etsy data is stored in your private Google Firebase account, encrypted in transit (TLS) and at rest. Access is restricted to your authenticated account only via Firebase Security Rules. Etsy API credentials (OAuth tokens) are stored in a separate, encrypted Firestore document accessible only through server-side operations.

5.4 Data Freshness & Caching

In compliance with the Etsy API Terms of Use, we do not display listing content that is more than six (6) hours old, or any other Etsy content that is more than twenty-four (24) hours old compared to the Etsy platform. We do not cache Etsy data longer than is reasonably necessary to provide our services.

5.5 Disconnection & Data Deletion

You may disconnect your Etsy account at any time from the Integrations or Settings page. Upon disconnection:

• Stored Etsy OAuth credentials are immediately and permanently deleted
• All automatic syncing stops immediately
• Previously imported order data remains available in your account for your business records
• You may manually delete any previously imported data at any time
• Full account deletion (Section 6.3) will remove all data, including Etsy-sourced data

5.6 Etsy Data Breach Notification

If any Etsy Member data accessed via the Etsy API is compromised or suspected to be compromised, we will promptly notify Etsy at dpo@etsy.com and the affected Etsy sellers within 24 hours of discovery, in accordance with the Etsy API Terms of Use.

6. Data Retention

We retain personal information as long as your account is active or as needed to provide our Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or security purposes.

Uploaded files (3D models, images) will be deleted from our storage when you delete them from your account or when your account is deleted.

7. Your Rights

7.1 Access & Correction

You may access and update your personal information at any time through your account Settings page. You may also request a copy of your data by contacting support@vixvvo.com.

7.2 Data Export

You can export your data (orders, clients, models, etc.) from the Settings page in your dashboard.

7.3 Deletion

You may request deletion of your account and personal data by contacting support@vixvvo.com. We will process deletion requests within 30 days, subject to any legal retention requirements.

7.4 Opt-Out

You may opt out of marketing communications at any time. Transactional emails (account verification, security alerts) cannot be opted out of while your account is active.

8. Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete such information promptly.

9. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences (theme, currency)
• Analyze site usage and performance

You can choose to disable cookies in your browser settings, but doing so may limit some functionalities of our Services (e.g., you may need to sign in each visit).

10. International Users

Our Services are hosted in the United States. If you access our Services from outside the United States, please be aware that your data may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. External Links

Our Services may link to external websites (including affiliate links). We are not responsible for the privacy practices or content of such external sites. We encourage you to review their policies before providing any personal information.

12. Updates to This Privacy Policy

We may update this Policy from time to time. The "Last Updated" date at the top of this document indicates the latest revision. We will notify you of material changes via email or a prominent notice on our website. Your continued use of the Services after any changes indicates your acceptance of the new Policy.

13. Contact Us

If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at support@vixvvo.com.