Privacy Policy

Account information: your name, email address, and password (stored hashed, never in plain text), or your Google account identifier if you sign in with Google.

Organization and brand information: what you tell us during onboarding — account type, brand guidelines, and the categories you generate content for.

Content: the prompts, links, and reference images you submit, and the images or video we generate in response. Reference images are stripped of location and camera metadata before storage.

Billing information: the plan you choose and payment status. Card and bank details are handled directly by our payment processor; we do not store full card numbers.

Usage and device data: IP address, browser type, pages visited, and actions taken, for security, rate-limiting, and diagnosing problems.

• To provide the Service: generating, judging, storing, and delivering your content;
• To operate your account: authentication, billing, daily credit resets, and support;
• To keep the Service secure: detecting abuse, enforcing rate limits, and preventing fraud;
• To improve the Service: understanding which features are used and where requests fail; and
• To communicate with you: service notices, security alerts, and, if you opt in, product updates.

AI providers. To generate or judge a result, your prompt, any reference images, and the resulting candidates are sent to the third-party AI provider serving that request, under our own platform-level credentials. We choose providers with their own data-handling commitments, but their processing of that data is governed by their own policies, not this one.

Payment processors. Checkout and subscription details are shared with the processor handling your payment (for example, Stripe) solely to complete and reconcile the transaction.

Infrastructure providers. We use third-party hosting, database, and storage providers to run the Service; they process data on our behalf under contract and do not use it for their own purposes.

We do not sell your personal information.

We keep account and billing records for as long as your account is active and as needed to meet legal and tax obligations afterward. Generated content is kept in your library until you delete it or close your account, after which it is removed within a reasonable period, subject to backups that age out on their own schedule.

Platform credentials are encrypted at rest and decrypted only at the moment of use; they are never logged or exposed through the API. Access to production data is limited to what is needed to operate the Service. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security.

• Access and export: your generation history and library are visible in the Service at any time.
• Correction: update your account and brand details from Settings.
• Deletion: request account deletion by contacting us; we will remove your personal data except what we are required to retain by law.
• Marketing email: opt out via the unsubscribe link in any marketing message. Service and security notices are not optional while your account is active.

We use a small number of strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not use third-party advertising cookies.

Our infrastructure and the AI providers we call may process data in countries other than your own. Where required, we rely on appropriate safeguards for that transfer, such as standard contractual clauses.

The Service is not directed to anyone under 18, and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be announced on the Service or by email before they take effect.

Questions or requests about this policy can be sent to privacy@vechtenlabs.com.