Privacy Policy

1. Information We Collect

• Account information — your name, email address, password (stored only as a secure hash), and organization details you provide at sign-up.
• Content you submit — the data you create or upload while using the Service, such as the records, responses, and files you create in a product.
• Billing information — your purchases, subscription and payment details, and a record of the credits you buy and spend. Payments are processed by our payment processor; we do not store full card numbers.
• Usage and device data — log data such as IP address, browser type, pages viewed, and timestamps, collected automatically as you use the Service.

2. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and improve the Service;
• authenticate you, secure your account, and prevent fraud and abuse;
• process payments and manage your purchases, credit balance, and subscription;
• communicate with you about your account, including service, security, and transactional messages; and
• comply with legal obligations and enforce our Terms.

3. How We Share Information

We do not sell your personal information. We share it only as needed to run the Service:

• Service providers — vendors who process data on our behalf (for example, hosting, email delivery, and payment processing) under confidentiality obligations.
• Legal and safety — when required by law, or to protect the rights, property, or safety of Vapor LLC, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. If You Answer Someone Else’s Assessment or Survey

Our customers build assessments and surveys and send them to the people they work with, usually as a link that needs no account with us. If that is how you arrived, you are answering a questionnaire our customer chose to send. They decide what is asked and what becomes of your answers; we host and process your response on their behalf and on their instructions. We do not use it to build a profile of you, to advertise to you, or for any purpose other than providing the Service to the customer who collected it.

A completed response records:

• your answers, and any scores calculated from them;
• the name and email address you choose to give — both optional, and the form says so; you can complete it without either;
• the date and time you submitted it; and
• the account you were signed in to, if you were signed in to one with us when you answered.

Who can read it. The customer who created the assessment, and anyone they have given access to in their account, can read your answers and scores together with the name and address you left, and can export them. If you leave neither, your answers are stored with nothing in them that identifies you.

Responses and your own account. If you left an email address as an anonymous respondent and later create an account with us and verify that same address, responses left under it are connected to your account so that you can read them alongside your own. That happens only once the address is verified, so no one can reach your responses by typing your address into a sign-up form.

How long it is kept, and how to have it removed. The customer decides. Your response is deleted when they delete it, delete the assessment it belongs to, or close their account. Because the decision is theirs, please direct a request to access or delete your response to them first; if you contact us instead, we will forward it and help them act on it. If you left neither a name nor an address, we have no way to find your response, so we cannot act on a request about it.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, and afterward only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below. Responses collected through a customer’s assessment or survey are kept for as long as that customer keeps them, as described in section 4.

6. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and hashing of passwords and sensitive secrets. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can update much of your account information directly in the Service, or contact us to exercise these rights. You may also opt out of non-essential emails at any time. If your request concerns a response you left on a customer’s assessment or survey rather than your own account, section 4 explains who to ask.

8. Cookies

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in and protecting against cross-site request forgery. We do not use them to track you across unrelated sites.

9. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us so we can delete it.

10. International Transfers

We may process and store information in countries other than where you live. Where we transfer data internationally, we take steps to ensure it remains protected consistent with this Policy and applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by updating the date above or notifying you in the Service). Your continued use after the changes take effect constitutes acceptance of the revised Policy.

12. Contact

Questions about this Policy or your data? Contact us at admin@vapor.dev.