Privacy Policy / Notice at Collection

This Privacy Policy explains how Vaughntastic Designs LLC, operator of Vaughntastic Maker Studio, collects, uses, discloses, stores, and protects information.

Information we may collect

• Account and contact information such as name, email, login/account status, and communications preferences.
• Subscription and transaction information such as plan, purchases, dates, amounts, credit grants, deductions and restorations, billing status, cancellations, refunds, and transaction identifiers.
• Payment-related metadata received from Square. VMS is not designed to store full payment card numbers or CVV.
• Service-use and technical information such as feature selections, credit use, downloads, exports, IP address, browser, device and session information, security logs, errors, and moderation or blocked-request records.
• Customer Content such as prompts, instructions, uploaded images, generated or refined outputs, Saved Designs, and files intentionally stored by the customer.
• Support information such as messages, screenshots, files, and affected outputs submitted through Help Desk.
• Lawful records needed for fraud prevention, legal compliance, security, and dispute resolution.

How VMS uses information

• Create and authenticate accounts.
• Provide generation, refinement, fit, warp, mockup, export, Saved Designs, Recovery, storage, billing, credits, and support.
• Process payments and billing events.
• Prevent abuse and fraud, enforce policies, diagnose failures, improve reliability, and protect rights.
• Send account, security, renewal, billing, support, and policy communications.
• Comply with law.

Providers and disclosures

Square: processes payments, subscriptions, invoices, refunds, and related payment functions. VMS may send customer or account identifiers, contact information needed for billing, plan or product selection, transaction amounts, tax-inclusive totals, subscription or renewal status, invoice, payment and refund information, and related order or billing metadata. Full card credentials are handled through Square rather than stored by VMS.

Supabase: provides database, authentication, account, billing-state, credit, entitlement, and application-data infrastructure.

Vercel: hosts and delivers the web application and may process ordinary hosting, request, deployment, security, and log information.

Cloudflare / R2: provides infrastructure and object storage used for Saved Designs and related stored assets and may process stored files, object metadata, request or network information, and security information necessary to provide those services.

OpenAI: APIs may process prompts, instructions, reference images, and related data needed for requested AI generation, refinement, moderation, or other AI features.

fal.ai: APIs and models may process prompts, images, masks, or other data needed for supported generation and refinement functions under current provider settings and terms.

Namecheap Private Email: is used for support, Help Desk, and business email delivery and therefore processes email addresses, message content, attachments, and delivery metadata as necessary.

VMS may also disclose information to professional advisers, regulators, courts, or law enforcement where reasonably required by law or necessary to protect rights or safety.

Sale, advertising, and retention

VMS does not sell customer personal information for money and does not use private customer artwork as advertising data. If future advertising or analytics practices legally constitute sale, sharing, or targeted advertising, VMS will update this policy and controls before enabling that practice.

VMS retains information only as reasonably necessary for account operation, Saved Designs, customer-requested storage, Recovery, billing and tax records, security and fraud prevention, support, disputes, and legal obligations. Recovery is retained for 7 days. Transaction, tax, security, and support records may be retained longer where reasonably necessary or legally required. Backups and provider systems may retain information for limited periods after deletion.

Security and customer requests

VMS uses reasonable administrative and technical safeguards. No system is completely secure.

Customers may contact support@vaughntasticmakerstudio.com to request reasonable access, correction, or deletion of eligible personal information, subject to identity verification and legal or operational exceptions. State-law rights will be honored where applicable.

VMS customer accounts are intended for adults 18 and older, and the Service is not directed to children.