Legal

Privacy Policy

Last updated: July 15, 2026

This policy explains what information Vinarra (“we,” “us”) collects when you use the Service, how we use it, and the choices you have. The short version: we collect what the studio needs to work - your account, your stories and recordings, and your payment status - and we don’t sell any of it.

1. What we collect

Account information: your email address and a password (stored only as a salted hash - we cannot read it).
Your content: the stories you write or paste, voice recordings you make, images you upload (including optional likeness photos you choose to provide), and the images, audio and video the Service generates for you. This is the product - it is stored so you can keep working on it.
Billing information: your subscription plan, credit balance, and a history of credit transactions. Card details go directly to Stripe, our payment processor - we never see or store your card number.
Connected accounts: if you connect YouTube, we store the OAuth tokens needed to upload on your behalf and the email of the connected Google account. Tokens are stored server-side only.
Usage and technical data: basic logs of requests to our servers (for reliability, abuse prevention, and to audit the credit ledger - for example, which generation a charge belongs to), and first-party analytics about how the studio is used - which features are used, how often generations are regenerated, and where jobs fail - so we can improve it. This is our own server-side data about your account; we do not use third-party advertising or cross-site tracking to collect it.

2. How we use it

To provide the Service: store your projects, generate the media you ask for, and publish where you tell us to.
To bill you correctly and keep an accurate credit ledger.
To secure the Service and prevent abuse.
To understand how the studio is used and improve it - in aggregate, from our own server-side data, never sold or shared for advertising.
To communicate with you about your account (verification emails, password resets, receipts, and important service notices).

We do not sell your personal information.We do not use your stories, recordings, or generated media to train our own or anyone else’s AI models.

3. AI providers (processors)

When you ask Vinarra to generate something, the relevant content is sent to the third-party AI provider that performs that job, solely to produce your result:

Anthropic (Claude) - script analysis such as finding speakers and staging scenes;
fal.ai - image and animation generation (your reference images and scene prompts);
ElevenLabs - AI voice narration and sound effects (the text to be spoken).

We send each provider only what that job needs, under agreements that restrict their use of it to providing the service.

4. Google and YouTube

If you choose to connect a Google account to publish to YouTube, Vinarra requests only the permissions needed to upload videos and set thumbnails on your channel.

Vinarra’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Vinarra uses YouTube API Services. By connecting YouTube you also agree to the YouTube Terms of Service and the Google Privacy Policy.
You can disconnect YouTube inside Vinarra (Account → Destinations), which revokes and deletes the stored tokens. You can also revoke Vinarra’s access at any time from your Google security settings.

5. Cookies

We use only essential and functional cookies: a session cookie that keeps you signed in, a short-lived security cookie while you connect YouTube, and a preference cookie that remembers optional in-app settings. These are required for the studio to work, so they do not need a consent banner.

We do not use advertising or cross-site tracking cookies. If we ever add non-essential analytics or advertising cookies, we will ask for your consent first where the law requires it (for example, a cookie banner for visitors in the EU and UK).

6. Retention and deletion

Your content stays stored while your account is active, so your library and stories are there when you come back.
If you delete content in the app, it is removed from your workspace; residual copies in backups expire on a rolling basis.
You can request deletion of your account and its data at [SUPPORT EMAIL]; we will delete it within 30 days, except records we must keep (for example billing records required for tax purposes).

7. Security

Content is stored in access-controlled databases; media is served only to the signed-in account that owns it (podcast feeds you explicitly publish are the deliberate exception). Passwords are hashed; OAuth tokens are stored server-side and never exposed to the browser. No internet service can promise perfect security, but we design for least exposure.

8. Children

Vinarra is for adults (18+). We do not knowingly collect personal information from children under 13. The stories made with Vinarra may be enjoyed by children, but accounts, recordings and uploads must come from adults. If you believe a child has provided us personal information, contact us and we will delete it.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. You can exercise most of these directly in the app (your content is downloadable by design); for anything else, email [SUPPORT EMAIL].

10. Changes

We may update this policy. If a change is material we will notify you (by email or in the app) before it takes effect.

11. Contact

[VINARRA LEGAL ENTITY NAME]
[BUSINESS ADDRESS]
[SUPPORT EMAIL]