Privacy Policy
Overview
We do not sell or share your personal information. We do not use third-party advertising pixels or cross-context behavioral advertising. If this changes, we will update this page and provide opt-out controls.
This policy explains how Visual Lexicon (“we”, “us”) processes your personal data when you use our website and services.
Personal data we collect
- Required — Email address (account creation & login).
- Optional — Profile photo, display name (personalisation).
- Automatic — IP address, browser & device information, usage logs (security & troubleshooting).
Purposes, legal bases & retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| User identification & login | Email, auth tokens, basic profile | Contract performance; Legitimate interests (fraud prevention) | Until account deletion + 30 days (backup & dispute window) |
| Service personalisation | Profile settings, usage history | Consent (where required); Legitimate interests | Until you change settings or revoke consent |
| Transactional communications | Email, delivery metadata | Contract performance; Legitimate interests | Up to 24 months |
| Payments, invoicing & tax | Billing name, email, transaction details | Contract performance; Legal obligation (tax/accounting) | Up to 7 years (legal/accounting requirements) |
| Security & troubleshooting | IP, logs, device info | Legitimate interests | Up to 3 years |
| Analytics (non-essential) | Event data (aggregated/pseduo-anonymous) | Consent | According to analytics tool settings |
Cookies & similar technologies
We use essential cookies that are necessary to run the site. With your consent, we also use analytics cookies to help us improve the service. You can change your preferences at any time.
This opens the same cookie settings used elsewhere on the site. Analytics loads only after you consent.
Sharing your data
We do not sell or rent your personal information. We disclose data only (i) to service providers acting on our instructions, or (ii) when required by law.
Processors (sub-contractors)
- SendGrid — transactional email delivery.
- Cloudflare — content delivery & security.
- Paddle — payments, subscriptions & invoicing.
- Analytics (optional, with consent) — e.g., Plausible or Google Analytics 4; no advertising pixels.
International data transfers
We may process or store data outside your country. Where applicable (e.g., transfers from the EEA/UK to non-adequate countries), we rely on appropriate safeguards such as the EU/UK Standard Contractual Clauses.
Security
We use industry-standard safeguards including transport encryption (HTTPS), access controls, logging and monitoring, and periodic vulnerability remediation.
Your rights
You may request access, correction, deletion, or restriction of your personal data. You may also object to certain processing, withdraw consent, and—if applicable—exercise data portability. Contact us using the details below.
Children & minimum age
Our service is not directed to children and is intended for users who meet the minimum age requirement for their country (13+ in most regions). If you believe a child has provided us personal data, please contact us and we will take appropriate steps.
Global Privacy Control (GPC)
We honor the Global Privacy Control signal. When your browser sends a GPC signal, we treat it as a Do Not Sell or Share request and disable any advertising/retargeting or cross-context sharing features (if present).
Contact
Privacy contact: support@visuallexicon.org
Changes to this policy
We will post updates on this page and, if the changes are significant, provide a prominent notice.
