Privacy policy
Last updated 14 October 2026
Who we are
Vuenia is operated by [Company legal name], [Registered address] ("we", "us"). We are the controller of the personal data described here. For any privacy question or request, email [[email protected]].
What we collect
- Account details — your name, email address and password (stored hashed), or your Google account details if you sign in with Google; your time zone and preferences.
- Billing — your subscription status, credit purchases and invoices. Card details are handled by Stripe and never reach us.
- What you create — your pipelines, prompts, notes, scripts, voices and the audio, slides and video generated from them, plus any API keys you add (readable only by your account, and encrypted at rest by our database provider).
- Demo requests — your name, email and what you'd like to see.
- Usage and performance — cookieless, aggregated page-view and performance data from Vercel, which doesn't identify you.
- Advertising — only if you accept cookies: Google Ads measurement of whether our ads lead to visits and sign-ups.
Why we use it, and our legal basis
- To provide the service you sign up for — your account, pipelines, runs and publishing (performance of a contract).
- To take payments and keep financial records (contract and legal obligation).
- To answer demo requests and support questions (legitimate interests).
- To keep the service secure and working well (legitimate interests).
- To measure our advertising (consent — which you can withdraw any time).
We don't sell your personal data, and we don't use your content to train AI models.
Who we share it with
We use the service providers below to run Vuenia. They process data on our behalf and under contract, only for the purposes described.
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, sign-in and the app's database | United States |
| Vercel | Hosting the website and app; cookieless analytics and performance monitoring | United States / global edge |
| Cloudflare | Network delivery and security | Global |
| Stripe | Payments, subscriptions and invoices — we never see or store your full card details | United States / EU |
| Resend | Sending emails, such as demo requests and account messages | United States |
| Google sign-in (if you choose it); Google Ads measurement (only with your consent); YouTube publishing (if you connect it) | United States / global | |
| Anthropic, OpenAI, Hugging Face | Language models that generate research, scripts and slides — when paid from Vuenia credit, or via your own keys | United States |
| ElevenLabs | Voice narration | United States / EU |
| Amazon Web Services | Running pipelines and storing generated audio, slides and video | United States |
When you use your own API keys, calls run on your own account with that provider, under your agreement with them.
International transfers
Several providers are based in the United States. Where your data leaves the UK or EEA, it is protected by the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or by the provider's certification under the EU–US Data Privacy Framework and its UK extension.
How long we keep it
Account data and your content are kept while your account is open, and deleted within 30 days of you closing it. Billing records are kept for as long as tax law requires (usually six years). Demo requests are kept for up to 12 months. Consent records are kept for as long as needed to show the choice was made.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent at any time. To make a request, email [[email protected]] — we'll respond within one month.
UK and EU: you can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
California and other US states: you have the right to know what we collect, to delete it, to correct it, and to opt out of the "sharing" of personal data for cross-context advertising — which you can do by rejecting cookies or sending a Global Privacy Control signal. We don't sell personal data and won't treat you differently for exercising your rights.
Children
Vuenia isn't intended for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy we'll update the date above, and for significant changes let account holders know by email.