Privacy Policy

Introduction

VHSTech ("we," "us," "our," or the "Platform") is committed to protecting the privacy and security of our users. This Privacy Policy describes how we collect, use, disclose, store, and protect information obtained from users ("you," "your") of the VHSTech platform and associated services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use immediately. This Privacy Policy should be read alongside our Terms of Use. We may update this policy at any time; continued use after changes are posted constitutes acceptance.

Information We Collect

When you register and use VHSTech, we collect the following categories of information:

Account Information

• Your name, display name, username, and profile picture (which may be sourced from your Google account via OAuth)
• Your email address, used for account identification and authentication
• Authentication credentials including session tokens, JWTs, and OAuth tokens. Passwords, where applicable, are stored using bcrypt hashing and are never stored in plain text
• Profile preferences and platform settings you configure

Communications Data

• The content of messages you send and receive, including direct messages and group chat messages
• Message timestamps, read receipts, and delivery status indicators
• Files, images, and media shared through the messaging system
• Conversation metadata including participant lists and group information
• AI assistant (Valen) conversation logs and interaction history

Usage & Activity Data

• Games accessed, played, and interaction patterns with the game library
• Features used, pages visited, and time spent on the platform
• File upload and download activity
• Presence and online activity status
• Login history including timestamps and session data
• Device type and operating system (for mobile app users)

Technical Data

• IP addresses and approximate geographic location derived from IP
• Browser type and version
• Server-side request and error logs
• Device push notification tokens (mobile app users)

How We Use Your Information

Service Operation: To create and manage your account, deliver platform features, process authentication, and send service-related notifications including messages and system alerts.

Safety & Moderation: To monitor for violations of our Terms of Use, investigate reports of abuse or prohibited conduct, enforce bans and restrictions, and detect and prevent fraud or security incidents.

Platform Improvement: To analyze usage patterns, identify bugs, develop new features, and generate aggregated anonymized analytics about how the platform is used.

Legal Compliance: To comply with applicable laws and regulations, respond to lawful government or law enforcement requests, and protect the rights and safety of VHSTech, its users, and the public.

Data Storage & Security

User data — including account information, messages, files, and activity logs — is stored in a managed MongoDB database hosted on secure cloud infrastructure. Access to the database is restricted to authorized services and personnel only.

We implement the following security measures to protect your data:

• Encryption in transit: All data between your device and VHSTech servers is encrypted via HTTPS/TLS. Traffic routed through Cloudflare receives additional DDoS protection and security filtering.
• Password hashing: Passwords are hashed using bcrypt with salt before storage. Plain-text passwords are never stored.
• Secure authentication tokens: JWTs are signed with secure keys and carry appropriate expiration periods.
• Access controls: Role-based access controls limit which personnel and services can access sensitive data.
• Cloudflare Tunnels: Server infrastructure connects to the internet via Cloudflare Tunnels, reducing direct exposure of server endpoints.
• Admin action logging: Administrative actions are logged to maintain accountability and detect misuse of elevated access.

Data Retention: We retain your data for as long as your account is active or as necessary to provide the Service. Upon account deletion, personal data will be deleted or anonymized within a reasonable period, except where retention is required by law or for legitimate purposes such as fraud prevention or dispute resolution.

Data Sharing & Disclosure

VHSTech does not sell, rent, or trade your personal information to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• With other users: Your display name, profile picture, activity status, and messages are visible to other users as part of the platform's core functionality.
• With service providers: We share data with trusted infrastructure providers (such as cloud hosting, Cloudflare, and notification delivery services) solely as necessary to operate the platform.
• With AI providers: Conversations with the Valen AI assistant may be processed by third-party AI model providers. We take reasonable steps to ensure these providers maintain appropriate data protection standards.
• For legal compliance: We may disclose data to comply with a law, legal process, or governmental request, or to protect the safety of any person or the integrity of the platform.
• With your consent: We may share your data with any third party when you have given us explicit consent to do so.

Cookies & Local Storage

VHSTech uses cookies and browser local storage to keep you logged in across sessions, remember your preferences, and maintain platform security. Third-party sign-in services such as Google OAuth may set their own cookies governed by their respective privacy policies.

Most browsers allow you to manage or disable cookies through settings. Doing so may affect your ability to stay logged in or use certain features of the platform.

Third-Party Services

VHSTech integrates with the following third-party services, each governed by their own terms and privacy policies:

• Google OAuth: Used for account sign-in. We receive your name, email, and profile picture as authorized during the sign-in process. We do not receive your Google account password.
• Cloudflare: Used for infrastructure security, DDoS protection, and server tunneling.
• YouTube Data API: Used to power media-related features within the platform. Use of these features is subject to YouTube's Terms of Service and Google's Privacy Policy.
• AI Model Providers: Power the Valen assistant. Conversation data may be processed by these providers' systems.
• Notification Services: Used to deliver platform alerts and admin notifications.

Children's Privacy

VHSTech is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a user under 13 has provided personal information without verifiable parental consent, we will promptly delete that information.

If you are a parent or guardian and believe your child under 13 has an account on VHSTech, please contact us immediately. Users between 13 and 17 should use the platform with the awareness of a parent or guardian.

Your Rights & Choices

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data. Many details can be updated directly in your account settings.
• Deletion: Request deletion of your personal data. Certain data may be retained as described in the Data Retention section above.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Objection: Object to certain types of data processing, including analytics.
• Withdraw Consent: Withdraw consent for data processing at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us through the in-app support system or official platform communication channels. We may verify your identity before processing certain requests.

California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your data, and the right to non-discrimination for exercising your privacy rights.

Do Not Sell or Share: VHSTech does not sell or share your personal information with third parties for cross-context behavioral advertising purposes.

Contact

VHSTech is operated by an independent student developer based in Vacaville, California. For privacy-related questions, data access requests, or account deletion requests, please reach out through the in-app support system or the official VHSTech platform communication channels. We will respond in a timely manner and in accordance with applicable law.