Legal
Privacy Notice
This notice explains how Vexa Studio handles personal data while providing the service.
Last updated: September 7, 2026 · Brand used on this page: Vexa Studio
Data we collect
We collect account details such as email address, display name, authentication information, billing identifiers supplied by payment providers, and support communications. We also process prompts, uploads, generated media, project data, settings, and usage records needed to provide the service.
Security and activity records
For signup, login, and generation events, we record the request IP address encrypted at rest, a country code only when supplied by a trusted proxy or CDN, user-agent data, event time, and limited operational metadata. We do not infer location from an IP address. Administrative views mask IP addresses.
Why we use data
We use data to operate and secure accounts, process generations and payments, prevent fraud and abuse, provide support, enforce policies, maintain records, improve reliability, and comply with legal obligations. We do not sell personal information.
Service providers
We use providers for AI generation, payment processing, cloud/storage infrastructure, authentication, and monitoring. They process data only as needed to provide their services and under their applicable agreements and policies.
Sharing and public content
We share data when you direct us to publish content, when needed to operate the service, when required by law, or to protect rights, safety, and security. Content you publish to an Explore or public project page may be visible to others; do not publish confidential or personal information.
Retention
We retain account, payment, security, and content records only for as long as necessary for the purposes above, legal obligations, dispute handling, and fraud prevention. Exact retention periods and legal-hold rules must be approved and published before paid launch.
Your choices and rights
You can access profile settings and request an authenticated data export at /api/me/export. Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of data. Account deletion is handled through a reviewed support process because billing, fraud, and legal-retention obligations may apply.
Contact and changes
Use the Contact page for privacy requests. We may update this notice as the service changes; the current version will be posted here with its update date.

