Privacy Policy

Effective date: [DATE] Last updated: [DATE]

Quick summary

Vialsense sends you one weekly email about the supplements and medications you choose to track. To do that, we store your email address and the list of items in your stack. We do not sell your personal data. You can delete everything at any time by emailing [privacy@DOMAIN]. This summary is for convenience only; the full policy below governs.

1. Who we are

Vialsense ("Vialsense," "we," "us," or "our") is operated by [LEGAL NAME], a sole proprietorship established in Türkiye, located at [REGISTERED ADDRESS]. For any privacy question or request, contact us at [privacy@DOMAIN].

2. The personal data we collect

• Account data: your email address (required) and, optionally, your name.
• Stack data: the supplements, vitamins, and medications you add to your stack. This information may reveal details about your health and is treated by us as sensitive.
• Feedback data: the "helpful / not relevant" responses you give on brief items, and any messages you send us.
• Technical data: limited log information such as IP address, browser/device type, and timestamps, used for security and to operate the service.

We collect stack data only when you choose to enter it. We do not buy personal data about you from third parties.

3. How we use your data

We use your data to:

• generate your personalized weekly brief and send it to you;
• operate passwordless ("magic-link") access to your stack;
• send transactional emails (for example, your welcome email and access links);
• respond to your feedback and support requests;
• maintain the security and integrity of the service; and
• handle billing for paid subscriptions (through our payment provider — see Section 5).

4. Legal bases for processing (for users in the EEA/UK)

Where the GDPR or UK GDPR applies, we rely on:

• Your consent — for storing and processing your stack (health-related) data and for sending the service emails you sign up for. You can withdraw consent at any time (see Section 8).
• Performance of a contract — to provide the service you subscribe to.
• Legitimate interests — to keep the service secure and functioning.
• Legal obligations — where we are required to retain or disclose data by law.

5. Who we share data with (sub-processors)

We share the minimum data necessary with service providers that help us run Vialsense. Each acts under its own privacy commitments:

• Hosting & database: [Render] (application hosting) and [Supabase] (database) store your account and stack data.
• Email delivery: [Resend] sends our emails on our behalf and processes your email address.
• AI processing: [Anthropic] — to generate your brief, the contents of your stack are sent to a third-party AI provider (the Claude API) for processing. We send only what is needed to produce your brief.
• Payments: [Paddle / Lemon Squeezy] acts as our Merchant of Record and processes your payment. We do not receive or store your full card details; their privacy policy governs the payment data they handle.

We do not sell your personal data, and we do not share it for third-party advertising.

6. International data transfers

We operate from Türkiye and our service providers may process data in the United States, the European Union, and other countries. This means your data may be transferred across borders. Where required, we rely on appropriate safeguards for such transfers (for example, standard contractual clauses). [CONFIRM SAFEGUARDS WITH COUNSEL.]

7. How long we keep your data

We keep your account and stack data while your subscription is active and for [RETENTION PERIOD, e.g. "up to 90 days"] after you cancel or delete your account, unless a longer period is required by law. We delete or anonymize data when it is no longer needed. You can ask us to delete your data sooner (see Section 8).

8. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• export/receive a copy of your data;
• withdraw consent at any time (this does not affect processing already carried out);
• object to or restrict certain processing.

To exercise any of these, email [privacy@DOMAIN]. We will respond within the time required by applicable law.

• EEA/UK users: you may also lodge a complaint with your local data protection authority.
• California users: you have rights under the CCPA/CPRA, including to know, delete, and opt out of "sale"/"sharing." We do not sell or share your personal data as those terms are defined. [CONFIRM CCPA LANGUAGE WITH COUNSEL.]

9. Security

We protect access to your stack with signed, time-limited links rather than passwords, and we use encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Because access works through links sent to your email, please keep your email account secure.

10. Children

Vialsense is intended for adults and is not directed to, or intended for use by, anyone under 18. We do not knowingly collect personal data from children. If we learn that we have collected data from someone under 18, we will delete it. If you believe a minor has provided us data, contact [privacy@DOMAIN].

11. Cookies and tracking

[STATE ACTUAL USAGE. If Vialsense sets no tracking/advertising cookies and uses only what is strictly necessary to operate, say so plainly — it is accurate and reassuring. Update if analytics or other cookies are added later.]

12. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email.

13. Contact

Questions or requests: [privacy@DOMAIN] [LEGAL NAME], [REGISTERED ADDRESS], Türkiye.