Privacy Policy

Effective as of June 13, 2022

At VSCO, it’s important to us to be open and transparent with the creators who trust us with their data. This Privacy Policy describes our privacy practices and how we handle your data that we collect through our websites, products, services, social media, marketing activities, and other ways described in this Privacy Policy (collectively, our “Services”).

Table of Contents

1. Data we collect
2. How we use your data
3. How we share your data
4. How long we keep your data
5. Your choices
6. How we secure your data
7. International data transfer
8. General audience service
9. Changes to this Privacy Policy
10. How to contact us
11. State and Region Specific Information

Data we collect

There are three types of data we collect about you: data that you provide us, data we get through third parties, and data we collect automatically.

Here are some tables that summarize the different types of data we collect

Data You Provide Us	Examples
Account Data We need certain information to set up your account.	Name, email address, phone number, username, password, redemption code, age, date of birth
Profile Data You can customize your profile on our Services so other creators can get to know you better.	Any information you add about yourself to your profile, such as your biographical details, photograph, social media links, interests, preferences
Our Communications With You Sometimes we might reach out to you, or you might reach out to us.	The communications between us when you contact us with questions, comments, or support requests
Feedback We would love to hear your thoughts on our Services.	Any feedback that you provide in any questionnaires, surveys, interviews, beta tests, or other scenarios in which we request your feedback
Payment and Transactional Data We need certain information about you so we can process your payments	Name, country, payment card information, bank account number, billing information, subscription information, purchase history
Marketing Data We want to honor your choices regarding our marketing efforts, and understand how our marketing campaigns are performing.	Your preferences for receiving our marketing communications and details about your engagement with them
User Generated Content You’ll get to interact with other creators and generate your own content when you use our Services.	Images, music, videos, collages, montages, comments, tags, collaborative areas that you create, your “favorite” content, the content you repost, messages, your interactions with VSCO’s or other people’s content on our Services
Data About Others You might want to invite your friends to use our Services.	Contacts that you share with us
Non-fungible token (“NFT”) Data We might need NFT data related to artists and their content, curators, exhibitions, and collections.	Artist or artwork information, cryptocurrency wallet address and accounts, cryptocurrency transactions, cryptocurrency balance, keys, the content of the NFT, information on the related blockchain

Date We Collect From Third Parties	Examples
Data from Social Media Platforms Sometimes you might connect with us on social media	Your interactions with our social media posts, your mentions of VSCO or VSCO related hashtags in your social media posts
Data from other creators Our creators might want to invite you to use our Services.	Contact lists that other creators sync with our Services
Data from your Single Sign On (SSO) Provider We try to make the login process simpler for you by providing you with some SSO options.	Information related to your account with the SSO provider, such as your name, picture, username, email address, or phone number

Data We May Collect Automatically	Examples
Device Data We receive certain information about your device and browser when you use our Services.	Operating system type and version, device type, device model, browser type, IP address, network information, unique identifiers, general location information
Online Activity Data We learn about how you’re engaging with us and our Services online.	Your interactions with different pages on our Services, the website that referred you to us, whether you opened our marketing emails or clicked links within them
Geolocation Data Depending on whether you’ve given us permission, we might learn about your precise location.	Precise location data that we get when you authorize our mobile application to access your device’s location
Metadata about User-Generated Content We get data about the content you contribute to our Services.	How, when, and where you created your content, how you edited your content
You may be able to configure your browser and device settings to limit some of the data we might collect about you. Some of our automatic data collection happens through cookies or similar technologies, which you can learn more about by reading our Cookie Notice

How we use your data

Once we collect your data, we use it in a few different ways. This table summarizes the different ways we may use your data.

How We Use Your Data	What this means
Delivering Our Services We’ll use your data to provide our Services to you.	We use your data to provide and improve our Services and our business, establish and maintain your account and profile, facilitate the display and transfer of NFTs and related content, enable security features, communicate with you about our Services, understand your needs and interests as they relate to our Services, personalize your experience with our Services, respond to your requests, questions, and comments, and invite your contacts that you invite to join our Services.
Research and Development We might use your data to help us make our Services better.	We may use your data for research and development so we can understand and improve our Services.
Marketing Depending on your choices, you might get marketing communications about our Services.	Direct marketing. We may send you direct marketing communications about our Services or products or services that we offer with our marketing partners. If you would rather not receive our marketing emails, you can follow the steps in the “Opt-Out of Marketing” section later in this Privacy Policy. Interest-based advertising. We may engage third-party marketing companies and social media companies to display ads on other online services. These companies may use cookies and similar technologies with our Services, our communications and other online services, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our creators with these companies to facilitate interest-based advertising to those or similar creators on other online platforms. You can learn more about your choices for limiting interest-based advertising in the “Your choices” section of our Cookie Notice.
Compliance and Protection We may need to use your data in certain ways to make sure we provide our Services legally and safely.	To provide our Services, we must be mindful of the many legal, ethical, and contractual requirements that apply to us, while also trying to protect our creators and our Services. To that end, we might use your data as needed to comply with the law, respond to lawful data requests (like subpoenas and warrants), protect our creators, protect our rights (including by establishing and defending against legal claims), comply with any legal, accounting, or reporting requirements, enforce our terms and policies, and prevent or investigate fraudulent, harmful, or illegal activity.

How we share your data

We might need to share your data with other parties to help us do the things mentioned above. This table summarizes the other parties that might receive your data

Who we might share your data with	Why we might share your data with them
Affiliates	We might share your data with our corporate affiliates or subsidiaries to do the things mentioned in this Privacy Policy.
Service providers	We lean on certain companies and individuals that provide services on our behalf or help us operate our Services or our business. These service providers perform services like data hosting, information technology, customer support, email delivery, marketing, and website analytics
Advertising vendors	We may work with advertising networks or adtech providers to advertise to you. You can learn how to opt-out of interest-based advertising in our Cookie Notice.
Professional advisors	We may need to share your data with our professional advisors, like our lawyers, auditors, bankers, and insurers if it’s necessary for them to provide their services.
Authorities and others	We may need to share your data with law enforcement, government authorities, and private parties if we need to do so for the compliance or protection purposes described above.
Business transferees	If we go through a business transaction like a merger, acquisition, corporate divestiture, or dissolution (including bankruptcy), or a sale of all or some of our assets, we may share or transfer your data to the transaction organization during the transaction or in contemplation of the transaction (including during due diligence).
Other creators and the public	Your profile and user-generated content are publicly visible and can be seen and used by others. We may create other ways you can interact and communicate with other creators, including things like tipping and other ways you can support creators monetarily. The data related to these interactions will be visible by other creators.
We make commercially reasonable efforts to verify that any third parties who we share personal information with provide a level of protection of personal information that is consistent with this Privacy Policy. Except for service providers and affiliates, any such third parties may use personal information as described in their own privacy policies to the extent permitted by law.

How Long We Keep Your Data

We retain data for as long as we need for the uses mentioned above. You can delete your account by following the instructions here.

When we don’t need your personal data anymore, we’ll either delete it or anonymize it, unless deletion or anonymization isn’t possible or practical (for example, because your data is in backup archives), in which case we’ll make sure your data is securely stored and isolated from further processing.

Remember that it is impossible to ensure that anything on the internet is ever completely removed. Even after your account is deleted, your content may still be visible, for example, if you’ve shared it on other platforms or if other people copied or shared your content before you deleted your account.

Your choices

You have control over your data in several ways. This table summarizes your choices concerning your data.

What you can do with your data	How to make it happen
Access or update your information	You can review and update certain account information by logging into your account.
Opt-out of marketing communications	You can opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of a marketing email, or by contacting us. You will continue to receive other non-marketing emails related to our Services. If you receive marketing text messages from us, you can opt out by replying STOP to our marketing message.
Set cookie preferences	To learn about the cookies we use and how you can control them, please see our Cookie Notice.
Disable mobile location data	You can disable our access to your device’s precise geolocation in your mobile device settings.
Decline to provide information	You can decide not to give us certain data, but then you may not be able to use certain features of our Services.
Configure third party platform settings	If you connect to our Services through a third party platform (like a social media account), you may be able to use your settings in your account with that platform to limit the information we receive from it moving forward.
Delete your content and account	You can choose to delete certain user-generated content from your account. You can delete your account entirely by following the instructions here. If you are under 18 years of age, you can also use these same instructions to exercise your right to delete your content under California’s “Online Eraser” Law.
Because there is no widely accepted standard for the browser-initiated Do Not Track signal, we do not currently respond to Do Not Track signals.

How we secure your data

We use technical, organizational, and physical safeguards to protect your data, like firewalls and other security technology. For example, when you enter confidential information (such as login credentials or information submitted from within our Services) we encrypt the transmission of that information using secure socket layer technology (SSL). But unfortunately there is always risk when doing anything on the internet, so we can’t guarantee 100% security of your data. If we find out that we’ve had a data breach and your personal data has been compromised, we’ll notify you as required by law and take appropriate steps to investigate and remedy the vulnerability.

International data transfer

We’re headquartered in the United States and may use service providers in other countries. Your data may be processed or stored in the United States or other countries outside of where you live, which may have data protection laws that are different from those in your country. When we transfer data across borders, we take measures to comply with the relevant data protection laws governing the transfer.

General audience service

Our Services are intended for a general audience. As such, they are not directed or targeted toward children under 13 years of age and are not intended for use by children under 13. If we learn that we collected data through our Services from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.

Changes to this Privacy Policy

From time to time, we may update this Privacy Policy. If we make any material change to this Privacy Policy, we will notify you via email, through a notification posted on our Services, or as otherwise permitted or required by law. In all cases, your use of our Services after the effective date mentioned in any updated Privacy Policy indicates your acceptance of the updated Privacy Policy.

How to contact us

• Online: https://support.vsco.co
• Mail: VSCO, 1500 Broadway, Suite 300, Oakland, CA 94612

State and Region Specific Privacy Information

You may have specific privacy rights depending on where you reside. For example, residents of California and individuals located in the European Economic Area and other jurisdictions have specific rights. You can find this state and region specific information here.