Privacy Policy
Valiri LLC ("Company", "we", "us", or "our") operates Uranum Stack (uranumstack.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Data Controller
Valiri LLC is the data controller responsible for your personal data.
For privacy-related inquiries, contact us at: privacy@uranumstack.com
DPO: Data Protection Officer/Privacy Contact: privacy@uranumstack.com
2. Information We Collect
We collect information in the following categories:
Account Information
- Email address (required)
- First name (optional)
- Profile picture/avatar (if using OAuth)
- Account creation and update timestamps
Payment Information
- Stripe customer ID and subscription ID
- Subscription tier and billing cycle
- Payment history (stored by Stripe, not us)
We do not store your payment card numbers, CVV, or complete billing details. All payment processing is handled securely by Stripe.
Project & Processing Data
- Uploaded video files (temporarily stored for processing)
- Processed result images
- Processing settings and preferences
- Project metadata (title, description, object type)
- Processing history and status
Usage Data
- Monthly processing count
- Storage usage
- Feature usage patterns
- Session activity
Technical Data
- IP address
- Browser type and version
- Device type and operating system
- Referring URLs
- Error logs and diagnostic information
Communications
- Feedback and bug reports you submit
- Support correspondence
- Survey responses (if any)
3. How We Use Your Information
We use your information for the following purposes:
- Provide and maintain the Service: Process your videos, store your results, manage your account
- Process payments: Handle subscriptions, billing, and refunds through Stripe
- Send transactional communications: Account verification, processing status, payment receipts
- Improve the Service: Analyze usage patterns, fix bugs, develop new features
- Prevent fraud and abuse: Detect suspicious activity, enforce usage limits, protect against misuse
- Comply with legal obligations: Respond to legal requests, enforce our Terms of Use
4. Legal Basis for Processing (GDPR/LGPD)
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Service you requested
- Legitimate Interests: Analytics, fraud prevention, service improvement (balanced against your rights)
- Consent: Marketing communications, optional features (you can withdraw anytime)
- Legal Obligation: Tax records, legal compliance, responding to authorities
5. Data Sharing & Third Parties
We share your information with the following categories of third parties:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database hosting, authentication, file storage, real-time updates | USA/Global |
| Stripe | Payment processing and subscription management | USA/Global |
| Upstash | Rate limiting and caching | Global |
| Processing Infrastructure | Video processing workers (Railway/Render) | USA |
We DO NOT sell your personal data to third parties.
We may disclose your information when required by law, legal process, or government request, or to protect our rights, property, or safety.
6. International Data Transfers
Your data is processed and stored in the United States. If you are located outside the USA, your information will be transferred to and processed in the USA.
We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards for international transfers where required by law.
Our third-party providers (Supabase, Stripe) maintain their own data protection compliance programs and certifications.
7. Data Retention
We retain your data for the following periods:
- Account data: Until you delete your account, plus 30 days for backup purposes
- Uploaded videos: Deleted after processing completion (configurable retention period)
- Processed images: Until you delete them or close your account
- Usage logs: 24 months
- Error logs: 12 months
- Payment records: As required by tax law (typically 7 years)
After account deletion, we retain anonymized data for analytics purposes.
8. Your Privacy Rights
Depending on your location, you may have the following rights:
GDPR & LGPD Rights (EU, Brazil)
- Right to Access: Obtain a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interests
- Right to Restrict Processing: Limit how we use your data
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
CCPA Rights (California, USA)
- Right to Know: Know what personal information we collect and how we use it
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt out of the sale of personal information (we don't sell data)
- Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights
How to Exercise Your Rights: To exercise these rights, contact us at privacy@uranumstack.com. We will respond within 30 days (GDPR/LGPD) or 45 days (CCPA).
10. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child, please contact us immediately at privacy@uranumstack.com, and we will delete the information.
11. Security Measures
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit using TLS/HTTPS
- Signed URLs with 1-hour expiration for file access
- Row Level Security (RLS) on all database tables
- Rate limiting to prevent abuse
- Server-side file validation (magic bytes verification)
- Secure password hashing and authentication via Supabase Auth
- Regular security updates and monitoring
While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
12. LGPD-Specific Information (Brazil)
For users in Brazil, in addition to the rights listed above:
- You may file complaints with the ANPD (Autoridade Nacional de Protecao de Dados)
- We provide Portuguese language support for privacy requests
- Our Data Protection contact (Encarregado) can be reached at privacy@uranumstack.com
13. CCPA-Specific Information (California)
For California residents:
Categories of Personal Information Collected:
- Identifiers (email, name, IP address)
- Commercial information (subscription, payment history)
- Internet activity (usage data, session info)
- Geolocation data (derived from IP address)
"Do Not Sell My Personal Information": We do not sell personal information as defined by the CCPA.
California "Shine the Light": California residents may request information about data sharing with third parties for marketing purposes. Contact us at privacy@uranumstack.com.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last Updated" date.
For significant changes, we will provide additional notice via email or through the Service.
15. Contact Us
For any questions about this Privacy Policy or to exercise your privacy rights, contact us at:
Valiri LLC
United States
We aim to respond to all privacy inquiries within 30 days.