Privacy Policy

1. What data we collect

• Signup: username, email and password (stored encrypted), plus the answers to the initial form (goal, intended volume and acquisition channel), used for internal metrics and to improve the product.
• Content: the images, videos and audio you upload and the content generated from them.
• Usage: generation records, credit consumption and basic technical data (IP, browser) for security and abuse prevention.

2. What we use it for

To run the Platform (execute generations, keep your library, manage credits), improve the product (aggregate metrics), keep it secure (fraud and abuse prevention) and communicate with you (account emails, such as confirmation and password recovery). We do not sell your personal data.

To prevent illegal use (such as deepfakes of real people or sexual content), images sent to some tools are analysed by an automated system before generation, and the ones it blocks are reviewed by people on our team. This analysis is based on our legitimate interest and on compliance with legal obligations (LGPD, art. 7, II and IX).

For access statistics and to improve the site, we record the pages visited, the referring page and the approximate city inferred from the IP address (never the person's address). Visitors who are not logged in are identified by an anonymous code computed so that the IP cannot be recovered — the IP itself is not stored. This record is deleted within 30 days.

3. Who we share it with

Only with the processors needed to run the service: database and authentication infrastructure (Supabase), hosting (Vercel), media storage (Cloudflare), AI processing (Fal.ai and model providers) and, where there are payments, the payment processor (Stripe). These processors handle the data according to our instructions and their own security policies.

4. How long we keep it

Your content is stored for as long as your account exists — on the Platform, nothing you generate expires. You can delete items from the library at any time (deleting removes the file from our storage). Account data is kept while the account is active and for the legal period after it is closed.

5. Your rights (LGPD)

Under the Brazilian General Data Protection Law (Law 13.709/2018), you can request access, correction, portability, anonymisation or deletion of your data, and withdraw consent. Just write to contato@vexelcreate.com. We will answer within the legal deadline.

6. Cookies and security

We use essential cookies to keep your login session — no third-party advertising cookies. Data travels encrypted (HTTPS) and internal access is restricted. No system is 100% secure, but we follow industry good practice and will report relevant incidents as the law requires.

7. Changes

This policy may be updated; relevant changes will be announced on the Platform. See also our Terms of Use.