Privacy policy.

This Privacy Policy describes how VR Prompt Studio™(“we”, “us”, “our”) collects, uses, and shares information when you visit our website, create an account, or purchase the Fashion Brand Launch System™. By using the site you agree to the practices described below.

We have written this policy in plain English rather than burying it in legalese because we believe the people whose data it covers — you — should be able to read it without a lawyer. If anything is unclear, write to verbaform@polsia.app and we will clarify.

We collect only what we need to run the site, fulfil orders, and support you.

• Account information. When you create an account (powered by our authentication provider, better-auth), we store your email address and the display name you choose. We do not see your password — it is hashed by the auth provider and never leaves it in plaintext.
• Order information. When you purchase the product through Stripe-hosted checkout, Stripe records the order details (items, amount, billing email, last four digits of the card). We receive the order record we need to grant access and to issue refunds; we do not see or store full card numbers.
• Support correspondence. If you write to us, we keep the conversation so we can help you and refer back to it later.
• Site analytics. We run a single, first-party page-view beacon provided by the platform that hosts the site. The beacon records page URLs visited and the standard request metadata an analytics service needs. We do not run third-party advertising trackers, do not set third-party advertising cookies, and do not build advertising profiles.

We use the information we collect to:

• Deliver the product you purchased and grant you access to your dashboard.
• Authenticate you when you sign in and keep your account secure.
• Process payments, refunds, and tax / accounting records.
• Reply to support requests and contact you about your account or order.
• Understand which pages get read and which do not, so we can improve the site.
• Detect and prevent fraud or abuse.

We do not sell your information, and we share it only with the vendors that actually run the service for you:

• better-auth — our authentication provider. They process your sign-in and store your account credentials.
• Stripe— our payment processor. Checkout is hosted entirely on Stripe's site; we never see or store your card details. Stripe processes the payment and returns an order record to us.
• Platform analytics — a single, first-party page-view beacon provided by the platform that hosts the site. We do not embed third-party advertising trackers.
• Legal — if we are compelled by a valid legal process or to defend a legal claim.

We use the minimum cookies needed to keep the site working. Specifically: a session cookie set by better-auth to keep you signed in, and a theme-preference cookie set by next-themes to remember your light / dark choice. We do not set third-party tracking cookies or advertising cookies.

• Account data. Kept while your account is active. Delete your account and we delete the account record (auth credentials, profile, linked orders) within 30 days.
• Order records.Retained for the period required by tax and accounting law in the operator's jurisdiction (typically seven years from the date of the transaction).
• Support correspondence. Retained while the conversation is active, then archived or deleted at our discretion.

You can ask us at any time to access, correct, export, or delete the personal data we hold about you. Email verbaform@polsia.app and we will action the request within 30 days. Where the request is tied to an account, we verify the request from the email address on the account before acting.

We take commercially reasonable steps to protect your information — encrypted transport (HTTPS / TLS), scoped access for the people who operate the site, and reputable vendors for the parts of the stack that hold your data. No method of transmission or storage, however, is 100% secure, and we cannot guarantee absolute security.

The site and the product are not directed at children under 13, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us with personal information, write to verbaform@polsia.app and we will delete the record.

We may update this policy from time to time. When we do, we will post the revised policy on this page with a new effective date. Material changes will be called out on the home page or in your dashboard for a reasonable period before they take effect.

Questions about this policy, your data, or anything else: verbaform@polsia.app.