Vesma is run by Shankhadeep Dey, a sole proprietor based in West Bengal, India. In this policy, "I" and "me" mean Vesma. Write to hello@vesma.io with any privacy question or request. The same address is the contact for requests under India's Digital Personal Data Protection Act, 2023.

What I collect

  • Pilot requests. Your name, email, business name, city, website or Instagram, how many listings you shoot a month, your next shoot date and any notes. I also keep the campaign tags in the link you followed (such as utm_source) and the website that sent you, if any.
  • Email. Messages you send me and my replies.
  • Pilot jobs. The photos, listing facts and agent contact details you send, your signed permission form, and the videos I make from them.
  • Payments. Dodo Payments processes card payments. I receive your name, email, the amount and whether the payment succeeded. I never see your full card number.
  • Spam protection. Cloudflare Turnstile checks each form submission. To do that, Cloudflare processes technical signals from your browser.
  • Site analytics. Cloudflare Web Analytics counts page views in aggregate. It doesn't use cookies and doesn't identify you.

Cloudflare handles your IP address to deliver and protect the site, and passes it on to my server. My server's error logs can include it. I use those logs only to fix problems.

Why I use it

  • To reply to your request and run your pilot job.
  • To take payment and keep the records tax law requires.
  • To keep spam and abuse off the site.
  • To understand, in aggregate, which pages and links bring people to the site.

I don't sell personal information, and I don't share it for targeted advertising.

Who processes it for me

ServiceWhat it does
CloudflareDelivers the site, blocks spam (Turnstile), stores sample media and nightly database backups (R2), forwards and sends email, counts page views
HetznerHosts the server and database that store pilot requests
GoogleEmail (Gmail) and, for pilot jobs, the Veo models that turn photos into video clips
OpenRouterPasses generation requests for pilot jobs to Google
Dodo PaymentsTakes payment as merchant of record

These providers store and process data in the United States, the European Union and other countries. I'm in India, so your information is also accessed from there.

How long I keep it

  • Pilot requests and emails: up to 24 months after we last spoke, unless you become a customer.
  • Your photos and the videos made from them: deleted within 30 days of delivery, or sooner if you ask.
  • Listing facts and agent contact details you send for a job: deleted with the photos.
  • Signed photo permission forms: kept for 3 years after the job, as a record that I had permission.
  • Payment and invoice records: as long as tax law requires.
  • Database backups: kept for 30 days, then deleted.

Your rights

Wherever you live, you can ask me for a copy of your information, ask me to correct or delete it, or withdraw consent you gave earlier. Email hello@vesma.io and I'll reply within 30 days. If you're in India you can also nominate someone to exercise these rights for you. If you're in Canada and aren't satisfied with my answer, you can complain to the Office of the Privacy Commissioner of Canada.

Cookies and storage

The site sets no tracking or advertising cookies. Cloudflare may set cookies that are strictly needed to protect the site from bots. While your tab is open, your browser keeps the campaign tags from the link you arrived with in session storage so they can be attached to a pilot request. Closing the tab clears them.

Children

Vesma is a business service and isn't meant for anyone under 18.

Changes

If this policy changes, I'll update the date at the top of the page and describe any significant change here.