Privacy Policy

1. Scope and service

Vacora is an Amazon US Listing risk review, Safe Rewrite, Recheck, and Report/PDF SaaS web application. This policy applies to the Vacora service delivered through getvacora.com and its subdomains.

2. Data we process

Vacora processes these categories of data: (a) account and authentication identifiers, including Google OAuth details supplied through Supabase Auth; (b) seller-provided Listing fields (title, bullets, description, search terms), selected category, and CSV/Excel rows you submit for review; (c) eligible OCR image files during processing and user-confirmed extracted text; (d) audit findings, Safe Rewrite output, Recheck results, and Report/PDF records; (e) payment-provider references and status, subscription records, entitlement records, and usage records — Vacora does not render or store full payment-card data; (f) support submissions you send through the Contact Support form; and (g) privacy-filtered security, error, usage, and performance telemetry.

3. Purposes

We process this data to: authenticate you and maintain your account; run and deliver the Listing review service; restore entitlements after technical delivery failures; process billing and maintain subscription state; secure and diagnose the service; provide support; and comply with applicable legal obligations.

4. Service providers

Vacora uses these providers, each of which may receive the categories of data relevant to its function: Vercel (hosting, Analytics, and Speed Insights when enabled); Supabase (authentication, database, and private storage); Creem or Stripe (payment processing, as configured and shown at checkout); DeepSeek or OpenAI (Safe Rewrite generation, as configured); Google Cloud Vision (eligible OCR image text extraction); and Sentry (error monitoring, when configured). This policy does not promise a specific provider retention period that is not controlled in this repository.

5. International processing

Service providers may process data in countries outside your own. This policy does not create a specific transfer mechanism guarantee or data-residency promise beyond what the configured providers offer.

6. Retention and deletion

Saved reports remain available to their owner until deleted or otherwise retained for service operation, security, dispute resolution, billing, backup, or legal needs. In-product report deletion is a soft delete: it removes normal owner access and does not promise immediate erasure from every related record or backup. OCR image files are processed for text extraction and are not intentionally stored by Vacora as report images; the OCR authorization session becomes unusable after approximately two hours. Confirmed extracted text can become report input. Payment, entitlement, and security records may be retained as needed for transactions, disputes, abuse prevention, accounting, and applicable law. You may contact support to request access, correction, or deletion of your personal information, subject to identity verification and applicable exceptions. Vacora does not operate an automatic purge job or guarantee a fixed deletion timeline for records that lack one.

7. Security

Reports and private PDF access are owner-scoped. Vacora uses access controls, privacy-filtered operational logs, and reasonable technical and organizational safeguards. No system can promise absolute security.

8. Cookies and observability

Vacora uses essential authentication and session cookies to operate the service. When configured, Vercel Analytics and Speed Insights and Sentry error monitoring may process device, browser, network, error, and performance metadata relevant to their functions. Their use of cookies or similar identifiers depends on the configured provider service. Raw Listing text is not included in analytics events or error-report payloads.

9. Your choices and rights

You can delete your saved reports through the product, manage your subscription through the billing portal, and contact support for access, correction, or deletion requests. Vacora does not sell personal information or use submitted Listing content for cross-context behavioral advertising. Depending on your location, you may have additional rights under applicable data protection law. Contact support to exercise them.

10. Business service and children

Vacora is a service for users age 18 or older acting for themselves or a business. Vacora does not knowingly collect information from children under 18.

11. Policy changes

Vacora may update this Privacy Policy. The effective date at the top of the page will reflect the most recent update, and additional notice will be provided where applicable law requires it. Contact: [email protected].

support@getvacora.com