1. Overview
This privacy policy explains how VST Collaboration, operated by punkQ ("we", "us"), collects, uses, and protects your information when you use our plugin and related services.
2. Information We Collect
Account information: When you sign in via Google, GitHub, Microsoft, or Discord, we receive your name, email address, and profile picture from the OAuth provider. We do not receive or store your password.
File data: We store the files you upload and associated metadata (file names, sizes, paths, timestamps).
Usage data: We track storage usage and feature limits to enforce subscription tiers.
Payment information: We do not collect or store credit card numbers or payment details. All payment processing is handled by our third-party payment provider. See section 6 below.
3. How We Use Information
We use your information to:
- Authenticate you and maintain your session
- Store and deliver your files
- Share files with collaborators you invite
- Manage your subscription and enforce storage limits
- Send transactional emails (invitations, QuickShare links)
- Respond to support requests
4. Storage and Security
Your files are stored in Microsoft Azure cloud infrastructure with encryption at rest and in transit. Access to your files is controlled by scoped, time-limited security tokens. We use HTTPS for all communications between the plugin, our backend, and cloud storage.
5. Data Sharing
We do not sell your data. We share data only with:
- Collaborators you invite — project members can see files in shared project folders
- QuickShare recipients — anyone with a QuickShare link can access the shared folder
- Service providers — Microsoft Azure (hosting, storage), our payment provider (billing), and email delivery services, solely to operate the Service
6. Payment Processing
Payments for subscription plans are processed by a third-party merchant of record. They handle all payment details, tax collection, invoicing, and compliance. We receive only your subscription status and plan information — never your payment card details. The payment provider's own privacy policy applies to payment data.
7. Cookies
This website does not use cookies or tracking scripts. The plugin communicates directly with our backend API and does not use browser cookies.
8. Your Rights
You can:
- Access your data — view your files and account information inside the plugin
- Delete your files — remove any file at any time from inside the plugin
- Delete your account — permanently delete your account and all associated data from the Account tab in the plugin
- Request data export — contact us to request a copy of your data
For data requests, contact support@punkq.com.
9. Data Retention
We retain your account and file data as long as your account is active. When you delete your account, all your data (files, projects, collaborator links) is permanently removed. We do not keep backups of deleted accounts.
10. Children's Privacy
The Service is not intended for children under 16. We do not knowingly collect information from children under 16. If you believe a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact
Questions about this policy: support@punkq.com