Legal
Privacy Policy
Last updated: July 9, 2026
1. Information We Collect
When you create an account we collect your name, email address, and a securely hashed password. Usage data — generation requests, character and duration counts, timestamps — is logged for billing and analytics. Prompts and generated media (audio, images, video, music) are stored so we can deliver results and populate your library; you can delete them at any time.
2. How We Use Your Information
- Provide, maintain, and improve the Vrex platform
- Process payments and manage your account balance
- Send transactional messages (receipts, security alerts)
- Monitor for abuse and enforce our Terms of Service
- Produce aggregated, anonymized usage statistics
3. Uploaded Assets & Voice Data
If you upload reference images or voice samples to drive a generation or build a custom voice, they are stored encrypted at rest and used solely to produce your outputs. Custom voice models derived from your samples belong to you. You may delete uploaded assets and derived models at any time from your dashboard, which permanently removes both the source and the derived model.
4. Cookies & Analytics
We use essential cookies for authentication and session management. We use privacy-respecting product analytics (no cross-site advertising trackers) to understand how the service is used and to diagnose errors.
5. Data Sharing
We do not sell your personal data. We share it only with our payment processor (Polar, our Merchant of Record) to complete transactions, with the AI model and infrastructure providers necessary to fulfill your generation requests, and with hosting providers that operate the service. All such parties are bound by data processing agreements.
6. Data Retention
Account data is retained while your account is active. After account deletion, personal data is purged within 30 days. Anonymized usage metrics may be retained indefinitely.
7. Security
We use industry-standard measures including TLS encryption in transit, AES-256 encryption at rest, and regular security reviews. API keys and passwords are hashed before storage.
8. Children's Privacy
Vrex is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Your Rights
You may request access to, correction of, or deletion of your personal data at any time by emailing [email protected] . We respond to all requests within 30 days.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be announced via email or an in-app notification at least 14 days before taking effect.
11. Contact
Questions about this policy? Email [email protected] .