Your rights — start here
- Access: see all data we hold · 30-day SLA
- Correct: edit any data that's wrong
- Export: JSON or CSV download · 30-day SLA
- Delete: 30-day grace then permanent
- Restrict / object: stop specific processing without deleting your account
- Opt out: marketing emails — every email has unsubscribe
- Do Not Sell or Share My Personal Information: we don't sell or share for cross-context behavioral advertising. CCPA / VCDPA opt-out at /account/privacy
- Virginia residents (VCDPA): right to access, correct, delete, opt out of targeted advertising, and opt out of profiling. Email privacy@valuetovictory.com
What we collect
You give us
- Email address (account)
- Password (stored hashed — we never see your plaintext password)
- Optional: name, photo, preferences
- Content you create
- Payment info entered on Stripe-hosted checkout (we never see card numbers)
We observe
- IP address (for security · 90-day retention)
- Browser/device user-agent
- Aggregate usage patterns
- Errors during your session
Why we collect it
| Purpose | Lawful basis |
|---|---|
| Provide the service | Contract with you |
| Process payments | Contract |
| Send transactional emails | Contract |
| Send marketing emails | Your opt-in consent (unsubscribe anytime) |
| Operate the service securely | Legitimate interest |
| Recordkeeping | Legal obligation |
Who else sees your data
Only vendors who help us run the service. Each one has a Data Processing Agreement and is bound by confidentiality. Full list at /subprocessors. Material additions get 30 days advance notice.
We never sell your data. Not to advertisers, not to data brokers, not to anyone.
How long we keep it
| Data | Retention |
|---|---|
| Active account | While account is active |
| Account after cancellation | 30 days then permanent delete |
| Receipts (financial) | 7 years (US tax law) |
| Marketing opt-in records | 3 years past unsubscribe |
| Web access logs | 90 days |
| Auth audit logs | 1 year |
Regulator focus
US (50 states) · GDPR (EU contacts) · CCPA (California) · VCDPA (Virginia) · NY SHIELD · enterprise DPAs available
Children's data
Our service is not directed to children under 13 (US) or 16 (EU). We don't knowingly collect data from children.
Aligned Hearts (Dating Service)
If you use VTV Aligned Hearts at /aligned-hearts, the following additional terms apply:
Information We Collect
- Profile data: Display name, gender, date of birth, height, body type, faith and denomination, bio, recreation and general interests, age preferences.
- Photos: You upload up to 6 photos. Photos are stored on our servers (currently base64-encoded in our database; we are migrating to dedicated image storage).
- Geolocation: If you grant browser permission, we collect approximate latitude/longitude to compute distance and search radius. You can disable map visibility and distance display in settings at any time.
- Religious affiliation: Faith and denomination are sensitive/special-category data under GDPR Art. 9 and similar laws. By providing this information you give explicit consent for us to process and display it to other users for matching purposes.
- Activity data: Swipes (left/right), matches, messages, blocks, and reports.
- Assessment data: Your P.I.N.K. assessment scores power compatibility matching. Other users see your 5 pillar scores on your card; they do not see sub-category breakdowns or individual answers.
How We Use It
To provide matching, compatibility scoring, messaging between matches, distance filtering, safety enforcement (blocks, reports, abuse detection), and notification emails when you receive a like, match, or message.
Sharing
Your profile (name, age, photos once interest-matched, faith, bio, P.I.N.K. pillar totals, approximate location) is visible to other Aligned Hearts members of your specified gender and age range within your search radius. We do not sell dating profile data. We do not share dating data with VTV's enterprise or coaching products without your explicit opt-in.
Retention & Deletion
You can deactivate your dating profile at any time in settings. To permanently delete your dating profile and all associated data (photos, matches, messages), email privacy@valuetovictory.com with the subject "Aligned Hearts deletion request." We will process within 30 days. Note: messages you sent to others may persist in their inboxes per their own retention.
Safety
Use the in-app block and report tools for any user violating community standards. We review reports within 72 hours. We may suspend or remove accounts for harassment, impersonation, illegal content, or repeated policy violations.
Age Requirement
Aligned Hearts is for users 18 and over. We verify date of birth at sign-up. False age representation results in account termination.
Contact
Privacy questions: privacy@valuetovictory.com