Privacy & Security

Who we are

This policy describes how Vitacore ("we", "us") collects, uses, and shares personal information when you use Vitacore Forge, FormFit scanning flows, and related websites or applications that link to this policy.

Information we collect

• Scan and imaging data: video recordings of your face for 3D reconstruction, still calibration images, and derived 3D models or meshes.
• Identifiers and contact data: such as name, email address, order or case identifiers, and similar details needed to provide the product or service.
• Technical data: IP address, device and browser type, approximate location derived from IP, and cookies or similar technologies where used for security or preferences.
• Support and communications: messages you send us and records of correspondence.

How we protect data in transit

Face-scan video and calibration photographs are sent from your device to our services only over encrypted connections (HTTPS / TLS). That includes direct uploads to our storage tier when we issue a time-limited upload URL—the link is HTTPS, so the file contents are not sent in the clear over the public internet.

How we store identity and scans

We store your name and other personal data separately from scan video, photos, and derived 3D models or meshes. They are not kept together in a single identifiable record, so scan media is not stored alongside your name or contact details in a way that associates them within our systems.

How we use information

We use personal information to:

• Operate scanning, modeling, and custom manufacturing workflows;
• Authenticate users, prevent fraud, and secure our services;
• Communicate about your order, scan status, or service changes;
• Comply with law, respond to lawful requests, and enforce our terms;
• Improve reliability and performance of our systems (using aggregated or de-identified data where appropriate).

Sharing

We share information with subprocessors that host infrastructure, store files, send email, or provide security and analytics, strictly as needed to deliver the service. We do not sell your personal information. We may disclose information if required by law or to protect rights and safety.

Retention

We retain scan media, models, and account-related data for as long as needed to fulfill orders, resolve disputes, and enforce agreements, and as required by applicable law. Retention periods may differ by data category and region; contact us for enterprise retention schedules.

Your rights and our records

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To find out what data we have stored, obtain a copy, or request deletion where the law allows, contact us at customer.service@vitacore.com. We will verify your request as permitted by law and respond consistent with legal requirements.

International transfers

Because our systems are hosted in the United States, personal information collected from outside the United States may be processed and stored in the U.S. (including Oregon and, for photogrammetry, the eastern United States). Transfers use encryption in transit as described above. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms, consistent with applicable law.

Children

Our consumer services are not directed to children. We do not knowingly collect personal information from children without appropriate consent.

Changes

We may update this policy from time to time. We will post the revised version with a new "Last updated" date and, where required, provide additional notice.

Contact

Customer service & data requests: customer.service@vitacore.com (what we store, access/copy, deletion where allowed by law).

Privacy & security (enterprise / IT): privacy@vitacore.com.