Privacy Policy

Information we handle

• Account information: email address, account identifier, profile details you provide, authentication-provider identity information, and verification/session records. Password authentication is handled by Supabase Auth; social-provider passwords are not requested by VisionRelay.
• Task information: briefs, service selections, scope, budget/quote, status, role assignments, comments, revisions, approvals, and timestamps.
• File information: uploaded file contents, names, types, sizes, task associations, versions, and annotation coordinates/page numbers.
• Payment information: order amounts/currency, provider references, verification status, monthly billing periods, subscription records, and credit-ledger entries. Hosted payment providers collect payment credentials; VisionRelay does not provide a form for collecting full card numbers or banking passwords.
• Operational and security information: authentication events and the device/network signals processed by our hosting, authentication, and anti-abuse providers when you connect.

Why this information is used

We use information to create and protect accounts, deliver requested services, organize task communication, verify payments, manage subscriptions and credits, provide account history, resolve support or billing issues, and prevent misuse.

Processing or retention may also be needed for security, fraud prevention, disputes, accounting, recordkeeping, or applicable legal obligations. Optional information in your brief should be limited to what the task requires.

Who can access task information

Access is based on the account and task role. Clients can access their own authorized workspace. Admins manage service requests and delivery. Approved freelancers receive the task details, files, and conversations made available for their assigned work; the worker view limits client billing and private intake details.

Do not include unnecessary personal information in materials intended for collaborators.

A private task URL is not itself permission to view the task. File downloads and previews may use temporary authorized links. Someone who receives a valid temporary link may be able to use it while it remains valid, so do not share those links outside your intended collaborators.

Service providers

• Supabase: application database, account authentication, profiles, and related account/session data.
• AWS S3: private uploaded file storage. The configured database and file-storage regions are Singapore.
• PayPal and PayMongo: hosted checkout, payment processing and verification, and relevant billing records.
• Google and Microsoft: optional sign-in providers, subject to the permissions shown during sign-in. Facebook integration is not currently offered publicly.
• Cloudflare Turnstile: security verification on email authentication forms. See Cloudflare’s Turnstile Privacy Addendum.
• Our web-hosting and configured email-delivery services process the requests or messages required to run the website and account communications.

These providers may process operational data in other countries according to their own terms. Selecting a storage region is not a guarantee that every provider operation occurs only in that region.

VisionRelay Assistant and optional Gemini processing

VisionRelay Assistant can answer questions from reviewed public information and provide contact options without external AI. If the optional AI control is available, you attest that you are 18 or older, and you separately agree to Gemini processing, the server may send your current message, up to eight shortened recent messages and limited project context to Google's Gemini API.

VisionRelay plans to use Gemini 3.5 Flash-Lite, with an optional Gemini 3.1 Flash-Lite fallback using the same key, and keeps provider credentials out of browser code. The unpaid Gemini service may use submitted content and generated responses to improve Google products and machine-learning technologies, and authorized human reviewers may process that content. Do not submit passwords, API keys, payment information, any personal information, confidential business information or private customer records.

Optional unpaid Gemini processing is restricted to an adult-only audience in countries approved by Google and VisionRelay. It is not offered to visitors in the European Economic Area, the United Kingdom or Switzerland under the unpaid-service configuration. If eligibility cannot be established from a trusted server-side signal, the assistant remains in verified Q&A and contact mode.

AI responses can be inaccurate. You can decline or withdraw AI permission by unchecking either confirmation in Optional Gemini help; that stops future requests and asks to cancel an active response, but cannot recall information already sent to Google. Both choices are held in this tab and reset when you clear the chat or reload. Clearing chat does not delete Google records. Google's handling of submitted content is governed by its Gemini API Additional Terms and privacy policy.

Browser storage and tracking

The app uses browser storage for authentication and session continuity and, when the local demo is available, fictional demo task data.

The current application code does not install advertising pixels or an analytics tracking service. Third-party sign-in, security, and payment pages have their own practices.

Read the Cookie Policy for more information about browser storage currently used by VisionRelay.

Account deactivation

You may deactivate your VisionRelay account from your account settings. Deactivation disables access to the account and signs you out, but it does not automatically erase your VisionRelay history.

Task records, workspace activity, payment records, subscription records, credit history, files, feedback, and other service records may remain associated with the account while it is deactivated.

Because deactivation is different from deletion, VisionRelay may be able to reactivate the same account later. If reactivated, retained workspace and service history may become available to the account again.

Retention and security

Account, task, payment, subscription, and service records may be retained for service administration, history, support, fraud prevention, dispute handling, accounting, and applicable recordkeeping requirements.

File-retention maintenance exists in the application code but is not yet represented as an automatic fixed deletion timetable. Contact VisionRelay when specific material should be reviewed for removal and keep your own copy of final deliverables you need to retain.

Access controls and private storage are part of the implementation. They do not make the service risk-free or end-to-end encrypted. No specific security certification, malware-scanning guarantee, or permanent backup service is represented here.

Deletion and erasure requests

Deactivating your account is different from requesting deletion or erasure of personal information.

You can ask VisionRelay to review personal information for deletion, correction, restriction, or anonymization where applicable. We may need to verify your identity and clarify the scope of the request before acting.

Some information may need to be retained where reasonably necessary for transaction records, unresolved work, disputes, fraud prevention, security, accounting, legal compliance, or other legitimate recordkeeping purposes. Where appropriate, information may be restricted or anonymized instead of being immediately removed.

Information that has been deleted or anonymized following a completed erasure request may not be recoverable if you return to VisionRelay later.

See Account Deactivation & Data Deletion for request instructions.

Your choices and requests

You can request access to or correction of your information and ask for deletion, erasure, or restriction where applicable. VisionRelay may need to verify account ownership before completing a request.

For information about privacy rights in the Philippines, see the National Privacy Commission’s explanation of erasure and blocking.

Contact VisionRelay

For support, privacy questions or a deletion request, email support@visionrelaydigital.com. You can also use your existing authenticated task conversation. Include your account email and relevant task reference. Never send your password, sign-in codes or payment-provider credentials.