Vasilissa Creative Studio · Development service

Privacy notice

This notice describes the processing currently implemented in this Vasilissa CRM. Vasilissa is responsible for this service. The legal entity, published privacy email, retention schedule and financial or contract retention rules still need to be confirmed before production readiness.

Project enquiries and introductions

Project forms require your name, email, telephone number, at least one service, a project description and acknowledgement of this notice. Company, general location and website are optional. Video Creation requests require an answer about on-site shooting; country and city are required when on-site shooting is selected. We retain the telephone as entered and a normalized international number for contact and search.

We record the submitted form, language, notice version, time, selected services and referral or offer information. Each intentional submission is a separate Request. Matching contact details do not merge records automatically. An administrator reviews and links Requests, Customers, Opportunities and Proposals, and records decisions, accepted Deals, completion and any referral payment obligations.

Signed-in Partners may introduce a potential customer. The Partner must be authorized to share that person’s information. Public Partner recruitment is not active. Opening a Creator page does not establish attribution: the successfully submitted form records the Creator source. No referral cookie or browsing-history attribution is used.

Creator applications and portal access

Creator applications require name, email, brand name, one to eight public profile links, an audience description and acknowledgement of this notice; an additional message is optional. Applications are reviewed separately and do not activate accounts automatically.

Portal accounts are invited by an administrator and linked to the identity returned by Sites sign-in after activation. We store identity links and hashed activation or proposal-access tokens, not your sign-in password. Proposal links give their holder access to a specific proposal. Treat them as private. Creator and Partner views are limited to their own referral and payment information; they do not include the customer’s full contact details, internal notes, proposal terms or Deal price.

Service providers and optional voice input

Sites hosts the application and sign-in service; the application database uses Cloudflare D1. Public forms use Cloudflare Turnstile to check submissions. The verification request includes the challenge token and, when supplied by the hosting service, the connecting IP address. The CRM does not store that verification IP or token as a business record. Hosting and sign-in services may process technical information under their own policies.

Dictation is optional and starts only when you choose it and grant browser permission. Your browser’s speech service may process audio. The CRM receives the resulting text when you submit the form and does not implement audio recording or audio-file storage.

History, restriction and erasure

Authorized administrators can review changes, internal notes and recorded decisions. They can preview a defined privacy scope, restrict its operational use or erase personal content from originals, linked snapshots, notes and ordinary projections. Financial amounts, typed record links and approval/payment history remain. Contract text and payment references may be retained only when an administrator explicitly confirms a justified need; those retained copies are excluded from ordinary privacy-masked exports and remain in restricted recovery material.

Restriction retains originals in restricted storage while blocking further operational use of the affected case or account. It is different from erasure. Previously downloaded exports or backups cannot be recalled automatically. A backup custodian must protect those copies and reconcile subsequent privacy actions before restoring them.

Retention, recovery and contact

No automatic retention or deletion schedule has been approved or enabled. The owner must determine the applicable categories and periods; this development service does not claim a statutory retention period. Administrators can prepare encrypted application backups on demand. Daily encrypted backups to a shared folder are planned but not enabled. The secure destination, key custody and recovery targets still need to be configured, and hosted database restoration has not yet been demonstrated.

You can ask the Vasilissa representative who provided this service about access, correction, restriction or erasure. Vasilissa’s privacy email must be confirmed for publication. A whole-system administrator export is not a customer personal-data response; any individual response requires identity verification, a review of the appropriate scope and protection of other people’s information.

Automated email is planned for the final service but is currently disabled. This CRM does not currently send activation, proposal, payment or privacy emails. Administrators provide activation codes and proposal links through separately chosen channels.