VisionCraft Cloud Control Center — privacy notice

Proposed version: INFO-2026-10-13-2. This notice covers the public information pages and VisionCraft Portal Mail. Customer registration, demo access and automated customer messaging are not enabled by this information-page release.

Who operates the service

VisionCraft Labs operates these pages from 163-X, Street 6, Phase 3, DHA Cantt, Lahore, Pakistan. Contact visioncraftlabs@gmail.com for privacy, support or questions about your information.

Visiting these pages

These information pages do not provide registration, payment, document-upload or customer-login forms. They do not set application cookies, use advertising pixels, or include application analytics. The logo is embedded in the page; it does not require a separate third-party image request.

Cloudflare delivers the pages and processes technical connection information, such as IP address and request information, to deliver and protect the service. Provider processing and retention are governed by the applicable service arrangements; we do not promise that provider-held technical records are deleted on the same schedule as our own records. We operate from Pakistan and service providers may process information in other countries.

Contacting us

If you email us, we receive your address and the message and attachments you choose to send. We use that information to answer your enquiry, provide requested assistance and keep a record of the response. Please avoid sending passwords, authentication codes, payment-card information, identity documents or sensitive third-party information by email.

Service enquiries are handled for the purpose of responding to your request. Where applicable law distinguishes processing grounds, requested contractual steps and our legitimate interest in responding to business enquiries are the proposed grounds, subject to the individual's applicable rights. Sending an enquiry does not subscribe you to marketing. Promotional contact requires a separate appropriate permission and can be stopped by emailing us.

VisionCraft Portal Mail and Google data

VisionCraft Portal Mail is an email-sending integration for the mailbox owner at visioncraftlabs@gmail.com. It supports requested CRM and service communications. The mailbox owner grants the Gmail send permission. Customers are not asked to connect their Google accounts.

The integration uses OAuth access and refresh tokens to send messages authorized by the mailbox owner. Outgoing messages contain the recipient address, subject and message body, and may contain a service link when that workflow is enabled. Google's acknowledgement identifies the accepted message. The permission does not allow the integration to read inbox messages, access Google contacts or delete existing mailbox messages.

Tokens are kept confidential and are used only for the authorized sending integration. The current authorization is stored encrypted on the operator's Windows account; customer email automation and cloud installation of that authorization are not enabled by this release. Google receives the outgoing message for Gmail delivery. An accepted message is not a guarantee of inbox delivery.

VisionCraft's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold, used for advertising, or used to train generalized AI models. Human access to Google-derived information is limited to the owner's authorized service use and the exceptions permitted by Google's policies, such as security investigation or legal obligations.

The mailbox owner can revoke the connection through Google Account connections. Contact visioncraftlabs@gmail.com to request removal of the stored authorization. Revocation or expiry stops authorized sending until a new grant is provided; it does not erase messages already delivered to recipients.

Retention and deletion

The proposed operator schedule is to delete routine enquiries and associated correspondence 12 months after the last meaningful response, unless an ongoing request, dispute or applicable recordkeeping obligation requires retention. Unnecessary attachments should be removed when the enquiry is resolved. Requested quotation discussions should be reviewed 12 months after the last meaningful contact; records that become commercial contract or accounting records are handled under a separate applicable recordkeeping schedule.

Gmail authorization credentials are retained while the owner needs the sending connection. The proposal is to remove the operator's stored credentials within seven days after a verified removal request or permanent disconnection. The single connection-test record should be removed within 30 days after testing concludes. Gmail mailbox copies of service correspondence follow the operator's correspondence schedule; recipient copies are outside our control.

The operator will review records monthly. Where information must be retained for a specific legal obligation or dispute, access should be restricted, the reason documented, and retention reviewed at least every six months. These schedules require operator adoption and verification before they become effective commitments. Provider backup and technical-log retention require separate confirmation and are not represented as already tested deletion workflows.

Your choices and requests

Contact visioncraftlabs@gmail.com to request access, correction or deletion, or to raise a privacy concern. Where applicable, you may also request restriction, portability or object to a use of your information. We may need proportionate information to verify your identity and authority.

The proposed service target is to acknowledge a request within seven days and respond within 30 calendar days, subject to any shorter applicable legal deadline or a lawful extension explained to you. This target does not reduce rights or legal time limits in your jurisdiction. You may also complain to the competent authority where applicable.

Future customer portal

The planned portal will collect company and business-contact details, authentication records, demo requests, permissions, quotations, communication preferences and security records. Before those workflows are activated, we will publish the applicable customer-data notice and verify the necessary retention, cookies, rights handling, provider arrangements and market approvals. This information-page notice does not authorize that customer-data processing or claim worldwide legal compliance.

Notice changes

An effective date will be assigned only after approval and publication. Material changes will be reflected in a new notice version, with additional communication where appropriate.