Privacy Policy

1. Information We Collect

• Account information — your name, email address, password (stored only as a secure hash), and organization details you provide at sign-up.
• Content you submit — the data you create or upload while using the Service, such as the records, responses, and files you create in a product.
• Billing information — your purchases, subscription and payment details, and a record of the credits you buy and spend. Payments are processed by our payment processor; we do not store full card numbers.
• Usage and device data — log data such as IP address, browser type, pages viewed, and timestamps, collected automatically as you use the Service.

2. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and improve the Service;
• authenticate you, secure your account, and prevent fraud and abuse;
• process payments and manage your purchases, credit balance, and subscription;
• communicate with you about your account, including service, security, and transactional messages; and
• comply with legal obligations and enforce our Terms.

3. How We Share Information

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers — vendors who process data on our behalf (for example, hosting, email delivery, and payment processing) under confidentiality obligations.
• Marketplace listings — if you list an assessment on a marketplace, your name is shown publicly with it. If you sell templates, you connect your own Stripe account, and Stripe collects the details it needs to pay you under its own privacy policy. The people who get your template never see responses you collected, and you never see theirs.
• Legal and safety — when required by law, or to protect the rights, property, or safety of Vapor LLC, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. If You Answer Someone Else’s Assessment or Survey

Our customers build assessments and surveys and send them to the people they work with, usually as a link that needs no account with us. If that is how you arrived, you are answering a questionnaire our customer chose to send. They decide what is asked and what becomes of your answers; we host and process your response on their behalf and on their instructions. We do not use it to build a profile of you, to advertise to you, or for any purpose other than providing the Service to the customer who collected it.

A completed response records:

• your answers, and any scores calculated from them;
• the name and email address you choose to give — both optional, and the form says so; you can complete it without either;
• the date and time you submitted it; and
• the account you were signed in to, if you were signed in to one with us when you answered.

Who can read it. The customer who created the assessment, and anyone they have given access to in their account, can read your answers and scores together with the name and address you left, and can export them. If you leave neither, your answers are stored with nothing in them that identifies you.

Responses and your own account. If you left an email address as an anonymous respondent and later create an account with us and verify that same address, responses left under it are connected to your account so that you can read them alongside your own. That happens only once the address is verified, so no one can reach your responses by typing your address into a sign-up form.

How long it is kept, and how to have it removed. The customer decides. Your response is deleted when they delete it, delete the assessment it belongs to, or close their account. Because the decision is theirs, please direct a request to access or delete your response to them first; if you contact us instead, we will forward it and help them act on it. If you left neither a name nor an address, we have no way to find your response, so we cannot act on a request about it.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and afterward only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below. Responses collected through a customer’s assessment or survey are kept for as long as that customer keeps them, as described in section 4.

6. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and hashing of passwords and sensitive secrets. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update much of your account information directly in the Service, or contact us to exercise these rights. You may also opt out of non-essential emails at any time. If your request concerns a response you left on a customer’s assessment or survey rather than your own account, section 4 explains who to ask.

8. Mobile Apps & Deleting Your Account

Our mobile apps are covered by this Policy and collect nothing beyond what section 1 describes. They contain no advertising identifiers, no analytics or tracking SDKs, and no location access, and they share nothing with third parties. Purchases made inside an app are processed by Apple or Google; we receive a transaction identifier so we can confirm the purchase with the store, and never your payment details. An app keeps a local copy of pages you have already loaded so it works with a poor connection; that copy is removed when you sign out.

You can delete your account at any time — in the app, on the Profile screen; on the web, on the Profile page. We ask for your password first. Deleting your account is immediate and cannot be undone: it removes your account and sign-in sessions, the workspace you own and everything in it — the assessments and questionnaires you created, the traits and saved charts you defined, the responses recorded against them — your credit balance and its history, and your subscription record. Responses you yourself submitted to someone else’s assessment go with it.

Two things to know first. If other people are members of your workspace, remove them before deleting — deleting your account deletes the workspace, and their records are not yours to erase, so we refuse rather than take them with it. And if you want a copy, download it first: Profile offers an export of your whole record, and it is gone once the account is.

9. Cookies

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in and protecting against cross-site request forgery. We do not use them to track you across unrelated sites.

10. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can delete it.

11. International Transfers

We may process and store information in countries other than where you live. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this Policy and applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by updating the date above or notifying you in the Service). Your continued use after the changes take effect constitutes acceptance of the revised Policy.

13. Contact

Questions about this Policy or your data? Contact us at admin@vapor.dev.