Vensoco

Privacy Notice

Last updated: September 3, 2026 · Draft · Leer en español

This is a courtesy translation of the Spanish original, which has not been reviewed by a lawyer yet. Neither version should be published as binding or linked from the live site until that review happens. If the two versions ever disagree, the Spanish version controls.

1. Who handles your data

Vensoco LLC, a limited liability company organized in the state of Wyoming, United States, operated out of the Dominican Republic, is responsible for the personal data described in this notice. Contact: hola@vensoco.com.

2. What data we collect today

When you create an account and use Vensoco, we store:

  • Account data: email and password (your password is never stored in plain text — Supabase Auth handles it, encrypted), or if you sign in with Google, your name and email as they appear on your Google account.
  • Profile data: your name, whether you're a Creator or a Partner, your project, its stage, your area, and your availability — whatever you write when you register or edit your profile.
  • Referral data: your referral code, who referred you (if anyone did), and how many people you've referred — for the system described in the Terms of Use.
  • Verification status: whether your profile is marked "Verified." Today this is turned on by hand by the Vensoco team, case by case — no document or photo is uploaded through the platform yet (see Section 3).
  • Anti-bot signals: when the registration form has Cloudflare Turnstile enabled, Cloudflare processes technical signals from your browser/device to confirm you're a real person. Vensoco doesn't receive or store those signals directly, only the pass/fail result.
  • Account creation date and basic technical metadata Supabase generates (for example, when you confirmed your email).

We don't use analytics or advertising cookies. There are no third-party marketing pixels.

3. What we don't collect yet (but will)

When identity verification with an official document + selfie through a third-party provider (Stripe Identity) goes live, Vensoco will start processing that data to confirm your identity. That third-party provider, not Vensoco, receives and processes the document and selfie directly. Before this launches, this notice will be updated with full detail (what's stored, for how long, and the specific rights over that data), and existing users will be notified.

4. What we use your data for

  • Creating and showing your profile in the feed to other registered users.
  • Running the referral and badge system.
  • Confirming you're a real person and preventing fake or automated accounts.
  • Communicating with you about your account (email confirmation, product notices).
  • Fixing bugs and improving the platform while it's under construction.

We don't sell your data to third parties, or use it for advertising.

5. Who we share your data with

For Vensoco to work, some data passes through infrastructure providers:

  • Supabase — stores the database and handles sign-in.
  • Netlify — hosts the website.
  • Google — if you choose "Continue with Google," Google processes that authentication under its own policies.
  • Cloudflare — processes anti-bot verification (Turnstile) when it's enabled.

These providers may store data on servers outside the Dominican Republic. None of them is permitted to use your data for their own marketing purposes.

6. Security

Your row in the database has row-level security (RLS): only you can read or modify your own profile, except for fields that depend on an action by the Vensoco team (like "Verified"), which are locked so that even you can't change them from your account. No security measure is perfect; if you notice anything odd about your account, write to us.

7. How long we keep your data

For as long as your account is active. If you close it or ask us to delete it, we erase your profile and associated account data, except for anything we're required to keep for legal reasons or to resolve an already-open dispute.

8. Your rights

Over your personal data, you have the right to request access (what we hold about you), rectification (correct it if it's wrong), cancellation (have it deleted), and objection (have us stop using it for a given purpose) — the ARCO rights recognized under Dominican Republic's Law No. 172-13 on Protection of Personal Data. We use that law as the reference for your data rights (not to decide who owns Vensoco LLC, which is organized in Wyoming) because that's where the team operates today. If you're in another country, your local law may grant you additional rights; we honor those too.

To exercise any of these rights, write to us at hola@vensoco.com. Editing your name or your project you can do yourself from your account, without writing to us. To close your account, there's a button in your account that sends the request -- we process it manually on our end and confirm by email once it's done.

9. Minors

Vensoco isn't intended for anyone under 18. We don't knowingly collect data from minors.

10. Changes to this notice

Vensoco is under active construction and this notice will change, especially once third-party verification goes live (Section 3). If the change is material, we'll notify you by email before it takes effect.

11. Contact

Questions about this notice or your data? Write to us at hola@vensoco.com.

← Back to home