Effective 15 August 2026
Privacy Policy
1. Who controls your data
The Service is currently operated as VSYZ Studio for a limited, invite-only alpha. The legal identity and contact details of the data controller will be provided to every tester and added here before public launch.
2. Information we collect
We collect account data such as email, display name, language, password hash and session records; content such as prompts, uploaded images and videos, selected keyframes and generated outputs; usage and billing records such as jobs, model choices, status, estimated customer price and actual provider cost; and technical records such as IP address, device or browser details, logs and errors.
3. How we use information
We use data to create and secure accounts; provide generation and Reels Maker workflows; route requests to selected AI providers; calculate credits and costs; prevent abuse; diagnose errors; maintain job history; communicate about the alpha; comply with law; and improve product reliability and user experience.
4. Legal bases
Depending on location and context, processing may be necessary to provide the requested Service, based on consent, required by law, or based on legitimate interests such as service security, fraud prevention and product improvement. The final launch policy will identify the applicable basis for each purpose and the controller’s legitimate interests where required.
5. Passwords and sessions
Passwords are stored only as industry-standard Argon2 cryptographic hashes, not plaintext. Session tokens are stored server-side in hashed form and sent through secure, HTTP-only cookies in production. No system can guarantee absolute security, but access controls and ownership checks are applied to projects and generations.
6. AI and infrastructure providers
To perform a generation, we may send prompts and selected media to the AI provider chosen in the Studio. NSFW image and video requests, including uploaded reference images, are transmitted to Nureta when you choose that workspace. Hosting, storage, monitoring and network providers may also process limited data for us. The final policy will list material processors, processing locations and safeguards for international transfers before public launch.
7. Retention
Account and ledger records are kept while the account is active and as needed for security or legal obligations. Temporary uploads and processing files are deleted according to configured lifecycle rules. Project media and outputs remain until deleted, expired under product rules or the account is closed. Alpha logs may be retained for a limited troubleshooting period.
8. Sharing
We do not sell personal data. We may share it with service providers acting on our instructions, when you direct a generation to a third-party model, to comply with law, to protect rights and safety, or as part of a business reorganization subject to appropriate safeguards.
9. Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. You may also complain to a competent data-protection authority. During the alpha, requests can be sent through the contact method included in your invitation.
10. Children
The Service is not intended for children under 18 during the closed alpha, and we do not knowingly invite them.
11. Changes
We may update this policy as features, providers and legal requirements change. Material updates will be communicated through the Service or the contact information associated with your invitation.