VSCO: Photo & Video Editor
Experiment with 200+ high-quality presets
Download
Please click here to view the previous version of our Privacy Policy
At VSCO, it’s important to us to be open and transparent with the creators who trust us with their data. This Privacy Policy describes our privacy practices and how we handle your data that we collect through our websites, products, services, social media, marketing activities, and other ways described in this Privacy Policy (collectively, our “Services”).
If you’re a resident of California, Colorado, Connecticut, Utah, or Virginia, check out the U.S. State Law Privacy Rights section below for some additional information about your personal information and rights under state law.
There are three types of data we collect about you: data that you provide us, data we get through third parties, and data we collect automatically.
Here are some tables that summarize the different types of data we collect
Once we collect your data, we use it in a few different ways. This table summarizes the different ways we may use your data.
We retain data for as long as we need for the uses mentioned above. You can delete your account by following the instructions here.
When we don’t need your personal information anymore, we’ll either delete it or anonymize it, unless deletion or anonymization isn’t possible or practical (for example, because your data is in backup archives), in which case we’ll make sure your data is securely stored and isolated from further processing.
Remember that it is impossible to ensure that anything on the internet is ever completely removed. Even after your account is deleted, your content may still be visible, for example, if you’ve shared it on other platforms or if other people copied or shared your content before you deleted your account.
You have control over your data in several ways. This table summarizes your choices concerning your data. If you’re located in California, Colorado, Connecticut, Utah or Virginia, you can find additional information in the U.S. State Law Privacy Rights section below.
We use technical, organizational, and physical safeguards to protect your data, like firewalls and other security technology. For example, when you enter confidential information (such as login credentials or information submitted from within our Services) we encrypt the transmission of that information using secure socket layer technology (SSL). But unfortunately there is always risk when doing anything on the internet, so we can’t guarantee 100% security of your data. If we find out that we’ve had a data breach and your personal information has been compromised, we’ll notify you as required by law and take appropriate steps to investigate and remedy the vulnerability.
We’re headquartered in the United States and may use service providers in other countries. Your data may be processed or stored in the United States or other countries outside of where you live, which may have data protection laws that are different from those in your country. When we transfer data across borders, we take measures to comply with the relevant data protection laws governing the transfer.
Our Services are intended for a general audience. As such, they are not directed or targeted toward children under 13 years of age and are not intended for use by children under 13. If we learn that we collected data through our Services from a child under 13 without the consent of the child’s parent or guardian as required by law, we will delete it.
From time to time, we may update this Privacy Policy. If we make any material change to this Privacy Policy, we will notify you via email, through a notification posted on our Services, or as otherwise permitted or required by law. In all cases, your use of our Services after the effective date mentioned in any updated Privacy Policy indicates your acceptance of the updated Privacy Policy.
This section provides additional disclosures to California, Colorado, Connecticut, Utah, and Virginia residents under their respective state privacy laws, including further information on their rights. Where we use the term “personal information,” we mean as such term (or similar term, such as “personal data”) is defined under those laws.
Verification. We’ll need enough detail to understand and respond to your request. We may need to verify your identity to process your requests and may also need to confirm your state residency. To verify your identity, we may require a combination of government identification, a copy of the receipt for your VSCO membership, or other information. We may also require you to login from a verified valid device or verify that the device you’re logging in from is valid.
Authorized Agents. You can have an authorized agent make a request on your behalf, but we’ll need to verify your agent’s identity. We would also need a copy of a valid power of attorney, or a written and signed permission to exercise your privacy rights on your behalf. We may still need to verify your identity and may ask you to directly confirm that you provided your authorized agent permission to submit the request on your behalf.
Sensitive Information. We process “sensitive personal information” (or similar term, such as “sensitive data”) only as reasonably expected for providing theservices that you’ve requested or as otherwise permitted without requiring a corresponding right to restrict or limit such use.
Profiling. We do not perform any “profiling in furtherance of decisions that produce legal or similarly significant effects”on our users.
Retention. The duration of how long we retain personal information is generally based on how long we need it for the purposes for which it was collected, which includes complying with our legal obligations.
You have certain rights regarding your personal information, subject to certain exceptions under the applicable state law. Here's a summary of your rights relating to personal information and how to exercise them. You are entitled to exercise these rights free from discrimination.
Access. You have the right to access a copy of your personal information, which you can do by following the instructions available here, or by submitting a request here.
Correction. You have the right to request that we correct inaccurate personal information that we have collected about you. You can do so by submitting a support request here, or by submitting a request here.
Deletion. You have the right to request deletion of the personal information that we have collected from you, which you can do by following the instructions available here, or by submitting a request here. But if we delete your personal information, we might not be able to provide our Services to you.
Alternatively, you can also broadcast the Global Privacy Control (GPC) to opt-out for each participating browser system that you use. Learn more at the Global Privacy Control website.
If we know that you're 13-15 years of age, we won't "sell" or "share" (as defined by applicable privacy law) your Personal Information unless permitted by privacy law or we get your consent to do so.
Appeals. If you are a Colorado, Connecticut, or Virginia resident, you may appeal our refusal to take action on a request exercising one of your rights mentioned above by contacting our support team.
Right to Know. If you’re a California resident, you have the right to know the following as it relates to the last 12 months: the categories of PersonalInformation that we’ve collected about you, the categories of sources from which we’ve collected the Personal Information, the business or commercial purpose for collecting, selling,” or “sharing” the Personal Information, the categories of recipients to whom we’ve disclosed the personal information for a business purpose, and the categories of third parties to whom the personal information was “sold” or “shared.” You can find this information in the table below.
The information provided in this notice applies only to individuals in the European Economic Area, United Kingdom and Switzerland (collectively, “Europe”) and explains our practices regarding personal data that we collect from you or which we have obtained about you from a third party, and the legal bases for processing your personal data. It also describes your rights in respect to our processing of your personal data.
Personal data. “Personal data” as used in this notice has the same meaning given in European data protection legislation.
Controller. VSCO is the controller of your personal data covered by this Privacy Policy for purposes of European data protection legislation.
Data protection representative. Our data protection representative in the EU and UK is VeraSafe. You may contact them at:
Legal bases for processing. We use your personal data only as permitted by law. Our legal bases for processing personal data are described in the table below.
Use for new purposes. We may use your personal data for reasons not described in this Privacy Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and explain the applicable legal basis.
Retention. We retain personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
When we no longer require the personal data we have collected about you, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. If we anonymize your personal data (so that it can no longer be associated with you), we may use this information indefinitely without further notice to you.
Sensitive personal data. We ask that you not provide us with any sensitive personal data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through our Services, or otherwise to us.
If you provide us with any sensitive personal data to us when you use our Services, you must consent to our processing and use of such sensitive personal data in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal data, you must not submit such sensitive personal data through our Services.
Your rights. You have the following rights in relation to the personal data we hold about you:
You may submit these requests through our Help Center. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions.
Cross-border data transfer. If we transfer your personal data out of Europe to a country not deemed to provide an adequate level of personal data protection for purposes of applicable data protection laws such that additional safeguards are required, the transfer will be performed:
You may contact us through our Help Center if you want further information on the specific mechanism used by us when transferring your personal data out of Europe.