How we handle your data

The short version of our Privacy Policy:

• We don't sell your personal information, and we don't run advertising.
• We don't use what you make to train our own models.
• Your work is private to your account unless you share it.
• You can ask for a copy of your data, or for it to be deleted, at any time.

What we keep

• Account details: your email address and your name. If you use a password, a salted hash of it, never the password itself.
• What you make: prompts, scripts, uploads, the pictures, audio and video you generate, and your boards.
• Usage and technical data: pages visited, features used, credits spent, how runs ended and error reports, and the IP address, browser and times any web service logs.

If you sign in with Google, we ask only for the basic sign-in details and keep your email address and name. We can't reach your Gmail, Drive or anything else in your Google account, and we keep no Google access tokens.

Who it goes to

• The providers behind the models. Vessero doesn't run its own models. To make something, the part of your prompt and the files a run needs go to the provider behind the model you picked. They get what that request needs, never your account history or your other projects.
• Stripe, for payments. Your card details go to Stripe and never reach us.
• The services that run Vessero for us: hosting, file storage, email delivery and product analytics. Text you type, such as your prompts, isn't sent to analytics.

The Privacy Policy names every company that processes data for us, and what each one does.

Content checks

Prompts are checked against our content rules before a run is charged, and uploads and results can be checked too. When something is refused, we keep a record for our staff for 90 days, longer only when we must hold it for an authority. A description of each checked file, never who uploaded it, is kept for up to 180 days so the same file isn't checked twice. These checks are never used to train any model.

Who can see your work

• Boards, generations and uploads are private to your account until you share them: a board with the people you invite, or a review link you send a client.
• Files are served through signed links that expire, so a link that leaks stops working.
• Our team reaches accounts only to run the service and answer support, and every action they take on an account is recorded.

Cookies

A few essential cookies keep you signed in and protect sign-in. One optional analytics cookie counts visits; blocking it changes nothing about how Vessero works. There are no advertising cookies or tracking pixels. Each one is listed in the Cookie Policy.

Your rights

You can ask for a copy of your data, to correct it, to delete it, to restrict or object to some of what we do with it, to take it to another service, and to withdraw a consent you gave.

• A copy: see Export your data.
• Deleting it: see Cancel your plan or delete your account and Delete your data.
• Anything else: write to us from the contact page and say it's a privacy request. We answer within one month, free of charge.

If you're unhappy with our answer, you can complain to Portugal's data protection authority, the CNPD, or to the one where you live.

After you delete your account

It's erased after a grace period. What stays is a short record that the account existed: the email address masked and as a one-way hash, the dates, the plan it was on and the reason given for leaving. It also stops an erased address from claiming what new accounts get, if it signs up again soon after. Records of payments are kept as long as tax law requires, and backups roll off on their own schedule.

Vessero isn't for children under 13. More on how we protect accounts is on Security.