Last updated: June 2026
1. Data Controller
The data controller of the personal data in the "ViStatus" application and its related web services is the Owner of ViStatus, reachable via the official support email address: vistatus.pl@gmail.com.
2. Collected Data
During registration and use of the Contractor account, we collect the following data:
- Email address: necessary for login, account verification, password resets, and direct communication.
- First and last name / Company name: displayed on project business cards and on the unique web pages shared with Investors.
- Multimedia materials: photos and images uploaded by the user as work progress updates.
- Technical Log Data: IP address, device type, operating system version, and crash logs (collected automatically to ensure application stability and security).
3. Purpose, Third-Party Processors, and Retention Period
Data is stored and processed exclusively to provide the service of managing and sharing project progress with your Investors. To ensure the highest level of security, we utilize professional infrastructure providers (Data Processors):
- Database and Storage: All user data, credentials, text entries, and uploaded photos are securely hosted and managed using Supabase (Supabase, Inc.).
- Data Retention: Photos and project information are kept in the cloud until the Contractor deletes their account or requests data erasure.
4. Cookies and Web Tracking Technologies
Our web viewer platform (the unique URL links generated for Investors) uses limited cookies and local storage technologies.
- Essential Cookies: These are strictly necessary to maintain user sessions, secure the website, and ensure the correct display of project progress.
- Analytics and Performance: We may use basic technical logs to monitor site performance and loading speeds. We do not use marketing or advertising cookies to track users across the internet.
Investors can manage or disable cookies through their individual web browser settings, though some parts of the project page may not function properly as a result.
5. User Rights (GDPR & International Regulations)
You have the full right to access your data, request its rectification, restriction, transfer, or permanent deletion.
- Account Deletion: The user can request permanent account deletion directly within the settings of the ViStatus application. Upon request, the account enters a temporary grace period of 30 days to prevent accidental data loss. During this period, the user can cancel the request. After the grace period expires, all personal data, projects, and photos will be permanently and irreversibly deleted from Supabase.
- Data Requests: All privacy-related requests or inquiries can be submitted directly via email to: vistatus.pl@gmail.com. The standard response time is up to 30 days.
6. Sharing with Third Parties
We share selected project data (photos, task updates, company name) exclusively with the Investors to whom you voluntarily send the unique view link. We strictly do not sell, rent, lease, or share your personal data, email addresses, or photos with external advertisers or third parties for marketing purposes.
7. Children's Privacy (COPPA)
The ViStatus application is designed as a business-to-business (B2B) management tool and is not intended for or directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will remove it from Supabase immediately.