Privacy Policy

1. Data Controller

Vision Shopper is operated by Vollifred OÜ (registry code 17040742), Luuavarre, Joeaare village, 78218 Marjamaa parish, Rapla County, Estonia. You can contact us at info@myralum.com for support requests and volli@myralum.com for legal/privacy requests.

2. What We Collect

• Account data (email, hashed password, auth identifiers).
• Billing data via Stripe (subscription status, Stripe customer/subscription IDs).
• Content you provide (prompts, uploads, generated image references, board data).
• Service usage and technical logs needed to operate, secure, and debug the service.

3. Why We Process Data

• To provide and maintain your account and paid subscription (contract necessity).
• To process payments, taxes, and billing records (contract and legal obligations).
• To prevent abuse, secure the platform, and improve reliability (legitimate interest).
• To respond to support, legal, and privacy requests (legal obligation and legitimate interest).

4. Subprocessors

We use trusted providers to deliver the service, including:

• Stripe (payments, subscriptions, tax handling)
• Google (OAuth sign-in, if you choose Google login)
• Hosting and infrastructure providers used to run Vision Shopper
• Database and storage providers used to persist your account and content
• Image generation provider used for generation features

Some providers may process data outside the EEA. Where required, we rely on lawful transfer mechanisms such as standard contractual clauses.

5. Retention

• Account and subscription records are kept while your account remains active.
• Billing records may be retained as required by tax/accounting laws.
• You can request account/content deletion through support.

6. Your Rights (GDPR)

Depending on your location, you may have rights to access, correct, delete, restrict, object, and request portability of your personal data.

Send requests to info@myralum.com. We target an initial response within 72 hours.

7. Cookies

Vision Shopper currently uses essential cookies and similar storage needed for authentication, security, and core app functionality.

With your consent, we may enable analytics cookies (including Google Analytics) to understand feature usage and improve the product. Optional analytics are not activated until you accept them in the cookie banner.

8. Security

We use reasonable technical and organizational safeguards, including encrypted transport (HTTPS), access controls, and operational monitoring. No system can be guaranteed 100% secure.

9. Changes to This Policy

We may update this policy from time to time. Material updates will be reflected by updating the date above and publishing the revised text on this page.