Privacy Policy

This draft notice describes personal-data handling by the Vitsuma platform. The operator’s registered legal identity, address, jurisdiction and dedicated privacy contact have not yet been provided and must be added before this notice is finalised.

This notice describes the features currently implemented. It does not claim certification or compliance with every privacy law, and does not cover separate websites operated by creators or other third parties.

The information processed depends on how you use Vitsuma:

Information is used to review applications, manage enquiries, prepare service proposals, maintain approved creator profiles, authenticate users, protect private tools and reduce abuse. Submitting a form does not enrol you in a marketing mailing list.

Forms ask for permission to store and review the information submitted. Depending on applicable law and purpose, processing may also be necessary to respond to a requested proposal, operate and secure the platform or meet legal obligations. The operator must confirm its jurisdiction-specific lawful bases before final publication.

If a creator application is approved, the public Makers profile may include the creator’s name, studio, location, specialisation, materials, heritage statement and portfolio link, as explained on the form. These fields can be read and copied by other website visitors.

Applicant emails, service enquiries, membership applications, quotes and reviewer notes are not included in public API responses or public profile pages. Private access is restricted to authorised administrators. Do not include sensitive or confidential information in text intended for a public profile.

Current technical services include:

No payment provider is connected to the current checkout or membership flow. Vitsuma does not request or store card details through these forms, and no membership payment or activation occurs.

No advertising pixels, session-recording tools or optional marketing-analytics tools are intentionally configured in the current application code. Infrastructure and authentication providers may process operational telemetry under their own policies. If optional tracking, payment or email-delivery services are added, this notice and any required consent controls must be updated before use.

Authentication uses cookies and session technologies managed by Clerk. Browser local storage retains your shortlist, followed makers and cart until you remove them in the interface or clear website data in your browser. You can clear website data to remove any previously stored browser records.

Clearing browser data does not delete applications or enquiries already submitted to the server, and may sign you out or remove saved preferences and historical records. Blocking cookies or storage may affect sign-in and saved preferences. No optional analytics consent banner is presented as a substitute for an actual tracking audit.

Submitted applications, enquiries, notes and quotes are stored in the server database. There is currently no configured automatic deletion schedule for those records. The operator needs to establish appropriate retention periods for review, ongoing discussions, legal requirements and dispute handling.

Browser-local records remain on that device until removed. Authentication records and infrastructure logs are also subject to provider retention practices. Deleting browser storage or a sign-in account does not automatically erase separately submitted applications or enquiries.

The application restricts private API access through sign-in and server-side administrator checks. Public responses omit private contact details and review notes. These measures reduce risk but cannot guarantee that a service is completely secure.

Hosting, authentication and font providers may process information outside your country. Exact processing locations, any applicable transfer safeguards and contractual arrangements must be confirmed by the operator; this draft does not promise a particular data-residency region or transfer mechanism.

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; or complain to an appropriate supervisory authority. Some rights are subject to lawful exceptions and identity checks.

You can manage browser-local preferences in the site or browser settings and choose not to submit optional information. Withdrawing consent does not undo processing that was lawful before withdrawal.

A dedicated privacy-request contact has not yet been designated. The operator must publish a working contact and request-handling process here before this notice is finalised. This page does not imply that an automated deletion or data-export facility already exists.

The current draft terms are intended for adults aged 18 or over. Please do not submit a child’s personal information in an application or enquiry. The operator should review and arrange appropriate handling or deletion if it learns that a child’s information has been submitted, subject to applicable legal requirements.

Changes will be published on this page with an updated date. Material changes, new providers or new uses of information should be communicated in an appropriate way, with fresh consent where required by applicable law.

Read the Terms and Conditions for the current limits of marketplace, enquiry and membership features.