לשם Leshem Type
עב
Legal

Privacy Policy

Effective date: October 26, 2026

This Privacy Policy explains how Vista Team Inc. ("Leshem," "we," "us") collects, uses, shares, and protects personal information when you use https://leshemtype.com and related services (the "Service"). Leshem is the "controller" (or "business") responsible for your personal information. Contact: hello@leshemtype.com, Suffern, New York, USA.

1. Information We Collect

a. Information you provide

  • Account data: name, email address, password (stored hashed by our authentication provider), company name, and profile details.
  • Order and license data: Fonts purchased, license tier, licensee name and organization, billing country, and invoices.
  • Designer data (if you join as a Designer): legal name, display/brand name, biography, uploaded font files and specimens, payment details, and tax forms (e.g., W-9 or W-8BEN), including tax identification numbers.
  • Communications: messages, support requests, DMCA notices, and survey responses.

b. Payment information. Payments are processed by Stripe. Stripe collects your card or payment details directly; we do not receive or store full card numbers. We receive limited information from Stripe such as payment status, the last four digits and brand of your card, billing country/postal code, and fraud signals.

c. Information collected automatically (analytics)

  • Visit data: pages viewed, referring site or campaign source (e.g., UTM parameters), date and time, and actions such as adding to cart and purchases.
  • Device data: device type, browser, operating system, screen size, and language.
  • Location data: approximate location (country, and possibly region/city) inferred from your IP address. We do not collect precise geolocation.
  • Identifiers: IP address, cookie or local-storage identifiers, and session identifiers.

See our Cookie Policy.

2. How We Use Information

  • To provide the Service: create accounts, process orders, deliver files, and issue and verify licenses (contract).
  • To operate the marketplace: review fonts, credit Designers, and pay Designers for their work (contract).
  • To send transactional emails such as receipts, download links, and account notices (contract).
  • To analyze and improve the Service, measure traffic sources and conversions, and understand usage by country and device (legitimate interests or consent where required).
  • To prevent fraud, enforce licenses and our Terms, and protect our rights and those of our Designers (legitimate interests).
  • To send marketing emails, if you have opted in or as permitted by law; you may unsubscribe at any time (consent or legitimate interests).
  • To comply with legal, tax, and accounting obligations (legal obligation).

We do not use your personal information to make decisions that produce legal or similarly significant effects on you based solely on automated processing.

3. How We Share Information

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as defined under California law. We disclose information only:

  • To service providers (processors) who act on our behalf under contract, including:
    • Stripe — payment processing and fraud prevention;
    • Supabase — database, authentication, and private file storage;
    • Vercel — website hosting, content delivery, and server logs;
    • Resend — transactional and service email delivery;
  • To Designers: limited sales information (e.g., Font, license tier, date, country) needed for sales reporting to the Font's author. We do not give Designers your email address or payment details unless you agree or it is needed for a license matter.
  • For legal reasons: to comply with law or legal process, enforce our agreements, or protect rights, property, or safety.
  • In business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy's protections.
  • With your consent or at your direction.

4. International Transfers

We are based in the United States, and our providers may process data in the U.S. and other countries. Where required (for example, for data from the EEA, UK, or Switzerland), we rely on appropriate safeguards such as the EU Standard Contractual Clauses or the providers' data-transfer frameworks.

5. Retention

We keep personal information only as long as needed for the purposes described above:

  • Account data: while your account is active, then deleted or anonymized within 90 days after closure, except as noted below.
  • Order and license records: for as long as the license exists, plus 7 years, so that we can verify licenses and meet tax obligations.
  • Designer tax and payment records: as required by tax law (generally at least 7 years).
  • Analytics data: 26 months in identifiable form, then aggregated or deleted.
  • Server logs: according to our hosting providers' standard retention periods.

6. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, access controls, and private storage for font files. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct it;
  • delete it;
  • receive a portable copy;
  • object to or restrict certain processing;
  • withdraw consent at any time;
  • opt out of marketing.

EEA/UK (GDPR): Our legal bases are listed in Section 2. You may lodge a complaint with your local data protection authority.

California (CCPA/CPRA) and other U.S. states: In the past 12 months we collected the following categories of personal information: identifiers, commercial information, internet/network activity, approximate geolocation, and (for Designers) financial and tax information. We use them for the business purposes in Section 2 and disclose them only to the service providers and recipients in Section 3. We do not sell or share personal information and do not knowingly do so for consumers under 16. We use sensitive personal information (such as account login credentials and Designer tax IDs) only for permitted purposes. You have the right to know, delete, and correct your personal information, and we will not discriminate against you for exercising your rights. You may use an authorized agent, subject to verification.

How to exercise your rights: Email hello@leshemtype.com. We will verify your identity and respond within the time required by law (for example, 30 days under GDPR or 45 days under CCPA). Where the law provides it, you may appeal a denial by replying to our decision.

Global Privacy Control / Do Not Track: Where required by law, we honor Global Privacy Control signals as an opt-out request.

8. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

9. Changes

We may update this Policy. We will post the new version with a new effective date and give notice of material changes.

10. Contact

Vista Team Inc., Suffern, New York, USA, hello@leshemtype.com.