Privacy Policy

Vessero is a tool you point at your own ideas. We keep the minimum needed to run your account, hold the work you create so you can come back to it, and send the parts of it that need a model to the AI providers listed below.

• We do not sell your personal information, and we do not run advertising.
• We do not use the content you create to train our own models.
• Your projects are private to your account unless you deliberately share them.
• You can ask for a copy of your data, or for deletion, at any time.

The rest of this page is the detail behind those four lines. It is not a substitute for reading the sections that apply to you.

Three kinds of data, each for a different reason. There is no fourth category collected quietly in the background.

We do not ask for and do not want special-category data — health, biometrics, political or religious affiliation, and the rest. Please do not put it into a prompt.

Google is the only way to sign in to Vessero. When you choose to continue with Google, we ask Google for the basic sign-in permissions — openid, email and profile — and nothing more. We do not ask for access to your Gmail, Drive, Calendar, Contacts, YouTube or any other Google service, and we cannot reach them.

We do not use Google user data to develop, improve or train artificial intelligence or machine-learning models, ours or anyone else's.

Vessero's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use what we collect to:

• Run the product — generate, render, store and return your work.
• Keep your account, apply your plan, and meter credits fairly.
• Answer support requests and investigate faults you report.
• Understand which features are used, so the roadmap follows reality.
• Detect abuse, fraud and attempts to overwhelm the service.
• Meet legal obligations where they apply to us.

We do not use your content to train our own models, we do not sell or rent personal information to anyone, and we do not run behavioural advertising.

If you are in the UK or the European Economic Area, we rely on the following bases under the UK GDPR and the EU GDPR:

Vessero does not run its own models. To produce a script, a voiceover, an image or a video, the relevant part of your prompt and any input media is sent to a third-party provider, which returns the result. This is the core of how the product works, and it is the most important thing on this page to understand.

Each provider processes that data under its own terms and privacy policy, and we choose providers that commit to not training on customer content by default. We send them only what the request needs — a prompt, a file, a transcript — never your account history or your other projects.

We also use ordinary infrastructure providers for hosting, databases and queues. They hold data on our behalf and are not permitted to use it for their own purposes.

Media is held in object storage and served through signed, time-limited links, so a URL that leaks stops working rather than staying open forever. Project metadata lives in a managed Postgres database, and in-flight job state in Redis. Traffic is encrypted in transit, and storage is encrypted at rest by the provider.

Access is limited to the people who need it to operate the service and to answer support requests. Your session is an HTTP-only cookie, which means scripts running in your browser cannot read it.

No service can promise perfect security, and we will not pretend otherwise. If a breach affects your personal data, we will notify you and the relevant regulator as the law requires.

Your content stays until you delete it or close your account. Intermediate render artefacts — the scratch files a job produces on its way to an output — are cleared automatically once the job finishes.

When you delete your account it locks at once and is erased after a grace period (14 days as standard), during which signing in brings it back. Erasure removes your content, your files and your account record. Delete your data walks through it.

What remains is a short record that the account existed: the email address masked (as in j***@example.com) and as a keyed one-way hash, the dates, the plan it was on and the reason given for leaving. It lets us answer questions about a closed account, and it stops an erased address from signing up again within 30 days to claim anything given to new accounts. We also keep a minimal record of payments and of any abuse investigation where the law requires it, and backups roll off on their own schedule rather than instantly.

Depending on where you live, you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate.
• Delete your data, and close your account.
• Restrict or object to a particular kind of processing.
• Port your data to another service.
• Withdraw a consent you previously gave.

Write to support@vessero.com and we will respond within one month. There is no charge. If you are unhappy with our answer you can complain to our lead supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) in Portugal, or to the data protection authority where you live.

If you are a California resident, we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising any right above.

Our providers operate globally, so your data may be processed outside the country you live in, including in the United States. Where data leaves the UK or the EEA we rely on the transfer mechanisms the law provides, such as the UK International Data Transfer Agreement and the European Commission's Standard Contractual Clauses.

Vessero is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, tell us at support@vessero.com and we will remove it.

We use a small number of cookies, and only one of them is required for the service to work. They are listed individually, by name and purpose, in the Cookie Policy.

When the substance of this policy changes we update the date at the top of the page, and for a material change we tell account holders directly rather than relying on you to notice. Continuing to use Vessero after a change means you accept the updated policy.

For anything about privacy, write to support@vessero.com and say it is a privacy request. The contact page works too.

The data controller for the processing described here is Forgutti Unipessoal Lda (NIF 519031075), Rua Comissão de Iniciativa n.º 2-A, 2.º andar, porta 212, Torre Brasil, 2410-098 Leiria (Pousos, Barreira e Cortes), Portugal, which operates Vessero. Its details are also on the legal notice, and the Terms of Service are governed by the laws of Portugal.