Privacy Policy
Last updated: 23 May 2026
1. Who We Are
OneVisualism is operated by ONEVISUALISM, a sole proprietorship registered in Singapore (UEN: 53523573M). We are the data controller for personal data processed through this service. Contact: admin@onevisualism.com.
2. Data We Collect
- Account data: email address, hashed password, account creation date
- Billing data: subscription status, payment history (full card details held by Stripe, not us)
- Usage data: prompts you submit, content you generate, credits consumed, timestamps
- Technical data: IP address, browser type, device information, log files
- Consent records: timestamp and IP at which you accepted these terms
3. How We Use Your Data
- To provide and operate the service
- To process payments via Stripe
- To send transactional emails (receipts, account notifications, security alerts)
- To send marketing emails — only if you have opted in via the marketing checkbox at signup
- To prevent fraud, abuse, and unauthorised access
- To comply with legal obligations including Singapore's Inland Revenue Authority record-keeping requirements
4. Legal Basis (GDPR users)
If you are in the European Economic Area, we process your data under:
- Contract: to deliver the service you've subscribed to
- Legitimate interest: to secure the service and prevent fraud
- Consent: for marketing emails (revocable anytime)
- Legal obligation: tax and accounting records
5. Data Sharing
We share data only with:
- Stripe (payment processing) — stripe.com/privacy
- Supabase (database and authentication) — supabase.com/privacy
- Vercel (hosting) — vercel.com/legal/privacy-policy
- AI model providers (content generation, anonymised where possible)
- Government authorities when legally required
We do not sell your personal data. We do not share it for third-party advertising.
6. Data Retention
- Account and billing records: 7 years after account closure (Singapore IRAS tax law requirement)
- Generation history: 24 months
- Logs and technical data: 90 days
- Marketing consent records: until withdrawn plus 3 years
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (subject to retention obligations above)
- Object to processing or withdraw consent
- Receive your data in a portable format
- Lodge a complaint with the Singapore Personal Data Protection Commission (PDPC) at pdpc.gov.sg, or your local data protection authority if in the EU
Submit any request to admin@onevisualism.com. We respond within 30 days.
8. Marketing Communications
Marketing emails are sent only if you opted in at signup. Every marketing email contains an unsubscribe link. Unsubscribing does not affect transactional emails (receipts, security notices).
9. Cookies
We use essential cookies for authentication and session management. We may use analytics cookies to understand usage patterns. We do not use third-party advertising cookies.
10. International Transfers
Your data is stored on servers in Singapore (Supabase) and may transit through service providers based in other countries (notably the United States). Where applicable, we rely on Standard Contractual Clauses and the providers' privacy certifications.
11. Security
We use industry-standard measures including encryption in transit (TLS) and at rest, row-level security on our database, and access controls. No system is perfectly secure; you acknowledge this inherent risk.
12. Children
The service is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has registered, contact admin@onevisualism.com and we will delete the account.
13. Changes to This Policy
We may update this policy. Material changes will be notified by email or in-app notice at least 14 days before taking effect.