Privacy Policy

1. Introduction

VanillaSky ("we," "us," or "our") operates vanillasky.ai. This Privacy Policy explains how we collect, use, and protect your information when you use our AI video creation Service. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

We collect minimal data necessary to provide and improve the Service:

• Usage analytics: Anonymous session-level events such as page views, feature usage, and video exports. These events do not contain personally identifiable information.
• Prompts: Text prompts you submit for AI video generation are processed by our AI pipeline to compose your video. Prompts and the AI's composition output are logged to our database for quality assurance and debugging, and may also be stored in your browser session storage.
• Uploaded media: Images and videos you upload (screenshots, logos, attachments) are stored in our media bucket so they can be rendered into your video and fetched when you share it. Files are retained for up to 30 days and then automatically deleted. File metadata (type, size, dimensions) is processed to facilitate rendering.
• Brand kit data: Brand colors, fonts, and preferences you set are stored locally in your browser (localStorage). If you save or share a video configuration, these values are embedded in the saved config and stored on our servers as part of that record.

3. How We Use Your Information

• To provide and operate the video creation Service.
• To process your prompts through our AI pipeline for scene composition.
• To analyze anonymous usage patterns and improve the Service.
• To detect and prevent abuse or misuse of the platform.

4. Third-Party Processors

We use the following third-party services to operate VanillaSky:

• Supabase: Database and storage infrastructure. Hosts track configurations, shared video configs, and analytics events.
• Cloudflare: Hosting and content delivery network (CDN). Serves the web application and static assets.
• Pexels API: Stock footage and image search. When you search for stock media, your search queries are sent to the Pexels API.
• Anthropic Claude API: AI model inference for the studio chat (scene composition, copy generation, iteration). Your chat messages and uploaded media are sent to Anthropic for processing.

Each of these services has its own privacy policy governing their handling of data. We encourage you to review their respective policies.

5. User Accounts and Authentication

VanillaSky currently does not require user accounts or authentication. You can use the Service anonymously. All user-specific data (brand kit, session prompts) is stored locally in your browser. If we introduce user accounts in the future, this policy will be updated accordingly.

6. Cookies and Local Storage

We use only essential cookies and browser storage mechanisms required for the Service to function. We do not use third-party tracking cookies, advertising cookies, or analytics cookies. For more details, please see our Cookie Policy.

7. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete data.
• Right to erasure: You may request deletion of your personal data, subject to legal obligations.
• Right to portability: You may request a copy of your data in a structured, machine-readable format.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to object: You may object to certain types of data processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Your Rights Under the CCPA

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of your personal information. Note: we do not sell personal information.
• Not be discriminated against for exercising your privacy rights.

To exercise your CCPA rights, contact us at [email protected].

9. Children's Privacy

VanillaSky is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

10. Data Retention

Anonymous analytics data is retained for up to 12 months for product improvement purposes. Shared video configurations are retained indefinitely to support sharing functionality. Uploaded media is retained in our storage bucket for 30 days and then automatically deleted. Prompts and AI composition traces are logged to our database for quality assurance. Data stored locally in your browser (brand kit, session data) persists until you clear your browser data. Client-side exported MP4 videos are downloaded directly in your browser and are never transmitted to our servers.

11. Security Measures

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure API communication with third-party services, row-level security on our database, and rate limiting on sensitive endpoints. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].