Privacy notice | VanillaSky

VanillaSky is responsible for the personal information described in this notice. We use it to make and deliver your car video, handle payments and support, and protect the service from abuse.

Information used

We process listing links, vehicle identification numbers (VINs), vehicle facts, photos, logos, dealer contact details, checkout and account email addresses, job status and payment references. We also process technical request information, including IP addresses, for security and abuse prevention. Stripe handles card entry; our app does not receive full card numbers. Essential cookies remember your region, browser ownership and sign-in session. Anyone with a shared video link can view that video, so share it only with people you intend to give access.

Withdrawal declarations record your name, email, order description, a receipt time and request reference, plus an IP-derived daily abuse-prevention identifier. We keep the declaration and acknowledgement to handle your withdrawal and meet legal obligations, for as long as the request and applicable legal recordkeeping require. We do not require a reason, postal address or account to submit it.

Why we use this information

We use the information needed to prepare and fulfil your order, provide account access and handle support under our contract with you or at your request before a contract. Security, abuse prevention and service diagnostics serve our legitimate interest in protecting and maintaining the service. Payment and accounting information is used to meet legal obligations.

Website and service activity

On the US-English pages, self-hosted Umami records browser page and action counts without analytics cookies. We send general page names and campaign labels, not listing links, video-link IDs, emails or account IDs. Do Not Track and Global Privacy Control disable this browser collection; German and Dutch pages do not load the browser collector.

Separately, our servers send anonymous counts of service failures and refund status to Umami in all regions, even when browser measurement is disabled. These reports contain event categories, region and processing stage, not customer IP addresses, contact details, listing links, account or video IDs, or payment references.

Our private service records creation, payment, refund, edit and download activity to deliver purchases and provide support. US outreach emails can contain a unique link associated with the intended recipient and message. We privately record requests to that link, visits, preview starts, deliberate play and start actions, and the creation, payment, refund and delivery of videos started through it. We distinguish detected automated requests and preview starts from deliberate play requests. A forwarded link does not prove who acted. A short-lived app cookie keeps the link associated with a new video; it does not grant account access. We respect Do Not Track, Global Privacy Control and the outreach measurement opt-out below. Email-open pixels remain disabled. Recipient identifiers are not sent to our anonymous Umami analytics. Earlier records and CRM summaries remain subject to the rights below.

Turn off outreach measurement in this browser

Services involved

Fly.io hosts the app and working files; Cloudflare hosts the marketing site. Tigris stores archived files. Supabase stores account and payment records and provides email-code sign-in. VIN lookups use Autolist and, when needed, the US NHTSA vehicle database. Anthropic processes selected images and text for classification and copy. fal processes images and generation requests through the selected model services, including ElevenLabs for optional narration. Resend sends service emails; Stripe processes checkout and card refunds. Our self-hosted Umami and Twenty services run on Hetzner. These services receive the information needed for their part of the service.

Processing can take place outside the European Economic Area, including in the United States. Provider terms include international-transfer safeguards such as EU Standard Contractual Clauses; their application depends on the provider, contract and processing involved. Contact [email protected] for details or a copy of the safeguards relevant to your data. Stripe also uses information as an independent controller for purposes including fraud prevention, regulatory compliance and improving its payment services. AI providers may retain inputs and results for service delivery, security or legal purposes; periods depend on the provider, model and applicable settings and terms.

Retention and requests

Inactive unpaid drafts are normally removed after 14 days. Paid projects and queued, running or unresolved jobs are excluded from that automatic cleanup. Paid files remain available for access, included versions and support; there is currently no fixed automatic expiry for those files. Account and activity records are kept separately and are not removed by draft cleanup; they have no automatic deletion schedule. Download your own copy. You can request deletion at [email protected]. Payment and accounting records may need to be kept to meet legal obligations or resolve disputes. Deleting working files does not immediately remove every backup, CRM or provider copy; contact us about the scope and timing of your request.

Your privacy rights

Depending on the applicable law, you can request access, correction, deletion or a portable copy of your personal information, restrict processing, or object to processing based on legitimate interests. Email [email protected]. We may need to verify your identity and explain any legal reason that prevents us from fulfilling part of your request. We respond to GDPR rights requests without undue delay and generally within one month of receipt. Where the law allows, complex or numerous requests may require up to two additional months; we tell you and explain why within the first month. You can complain to the Dutch Autoriteit Persoonsgegevens or your local data protection authority.

Contact [email protected]