Privacy Policy
In short: we collect what we need to make your video and run your account: your name, work email, company, your brief and the files you upload. Payments go through Razorpay, so we never see your card details. We don't use advertising or analytics cookies. You can write to hello@vpixai.com about any of this.
Who we are
This policy covers the vpixai website at vpixai.com and the vpixai client app at app.vpixai.com. vpixai is an AI-assisted video production studio for B2B teams (more about vpixai). "We", "us" and "our" mean vpixai; "you" means a visitor to the website or a user of the client app.
What information do we collect?
When you visit vpixai.com
- How you found us. If you arrive from a campaign link or another website, a small script saves the campaign tags (UTM source, medium, campaign, content and term), the name of any ad click ID in the link (for example "gclid", not its value), the address of the page that referred you, and the page you landed on. It is stored in your browser's local storage under the key
vpx_sourceand only reaches us if you sign up. - Technical data sent by your browser. Like any website, our server receives your IP address and browser details when you load a page.
When you create an account in the client app
- Account details: your name, work email and password. Your company name is optional. Passwords are stored only as a salted scrypt hash, never in plain text.
- WhatsApp number (optional): if you give one, we send you project updates on WhatsApp. You can turn these off or remove the number in Settings.
- How you heard about us (optional), plus the "how you found us" details described above, so we know which channels bring new clients.
- Profile and business details you add later: your role, website, industry, audience, what you offer, brand colors, fonts, tone and logo.
When you work on a project
- Briefs: project title, video type, length, format, goal, audience, key message, call to action, style notes and deadline.
- Ideas, messages and review comments, including approvals, change requests and the video timestamp a comment is pinned to.
- Files you upload (logos, footage, documents, up to 1 GB per file) and files we deliver, such as scripts, storyboards, drafts and the final video.
- An activity log of what happened in your workspace (for example "brief submitted" or "final video uploaded").
When you pay
You pay through Razorpay Checkout, which opens in your browser from Razorpay's own servers. Your card, UPI or bank details go straight to Razorpay, which handles them under Razorpay's privacy policy; vpixai never receives or stores them. We send Razorpay your name and email (to pre-fill the checkout), the project ID, the project title and the amount. We keep a record of each order: Razorpay's order and payment IDs, the amount, currency, status, the payment method type (such as "card" or "upi") and when it was paid.
Security checks
To stop bots and password guessing, we use your IP address to limit how many sign-ups and login attempts come from one network. These counters are kept in the server's memory only and are cleared when it restarts. On sign-up and login, Cloudflare Turnstile may run a short check in your browser; the result and your IP address are sent to Cloudflare to verify it. If our sign-up form's hidden bot trap is filled in, the IP address is written to the server log.
Do we use cookies?
We use one cookie, and only in the client app: vpx_session, which keeps you logged in. It lasts 30 days or until you log out, and it is marked HttpOnly, Secure and SameSite=Lax. It is strictly necessary for the app to work. The website also uses your browser's local storage for the vpx_source record described above. We don't use advertising or analytics cookies.
Cloudflare Turnstile, which runs on the sign-up and login pages, may process data about your browser under Cloudflare's privacy policy.
How do we use your information?
- To make and deliver your video: writing the script, building visuals in your brand, sharing drafts for review and delivering the final file.
- To run your account and the client app, including logging you in and keeping it secure.
- To take payment and keep payment records.
- To keep you and our team updated about your project (see below).
- To understand which channels bring new clients, using the "how you found us" details.
- To reply when you contact us.
How does the AI brand setup work?
During setup, you can ask the app to build a brand kit from your website. When you do, our server visits the public website address you entered and reads its pages, up to 5 stylesheets, meta tags and possible logo images. It sends the signals it found (page title and description, colors, fonts, headings, logo candidates and up to 5,000 characters of page text) to Anthropic's Claude API, which suggests your company name, industry, offering, audience, colors, fonts and tone. The logo it picks is saved to your asset library.
Only information from your public website is sent to Anthropic, not your name, email or account details. The suggestions fill only the fields you haven't already filled, and you can edit or ignore them. The feature is optional: you can fill in your brand kit by hand. Anthropic processes this data under its privacy policy and commercial terms.
What notifications do we send?
- To our team, on Slack: when someone signs up (name, company, email, WhatsApp number if given, and how they found us), and for project events such as briefs, stage changes, messages, shared drafts, approvals and payments (project title, your name and company, and payment amount and method).
- To our team, on WhatsApp: similar alerts for sign-ups, briefs, messages, approvals, change requests and payments, sent through Meta's WhatsApp Cloud API.
- To you, on WhatsApp, only if you gave a number: updates when your project moves forward, when our team messages you, when your final video is ready and when we receive your payment. Each message includes your first name, the project title and a link to the app. You can turn these off in Settings.
- By email: we use your email to log you in and to reply to you about your projects. The client app doesn't currently send automated emails.
Who do we share information with?
We share personal information only with the service providers that help us run vpixai, and only what each one needs:
| Provider | What they do for us | What they receive |
|---|---|---|
| Cloudflare (R2) | Stores uploaded and delivered files in a private bucket; also serves the portfolio videos on our website | The files you upload and the files we deliver |
| Cloudflare (Turnstile) | Bot protection on sign-up and login | Challenge result, IP address and browser signals |
| Razorpay | Payment processing | Name, email, project ID and title, amount; your payment details (entered directly with Razorpay) |
| Anthropic | AI brand kit suggestions | Signals from your public website only |
| Meta (WhatsApp Cloud API) | WhatsApp alerts to our team and optional updates to you | Message content described above; your number if you opted in |
| Slack | Internal alerts to our team | Message content described above |
| Google Fonts | Serves the Inter typeface on our website and app | Your IP address and browser details when the font loads |
| unpkg and cdnjs (Cloudflare) | Serve open-source scripts used by our pages (icons and animation) | Your IP address and browser details when the script loads |
Inside vpixai, the team members working on your projects can see your account, brief, files, messages and payment status. We do not sell your personal information. We may disclose information if the law requires it.
Where is your information stored?
Our service providers may process data in countries other than yours. Where the law requires it, we rely on appropriate safeguards for those transfers.
How long do we keep it?
We keep your account and project information for as long as your account is active and as long as we need it to provide the service, keep payment records and meet legal obligations. Some details in practice:
- Login sessions expire after 30 days, and changing your password logs out your other sessions.
- Links to view or download files expire after one hour.
- When you delete a file or an idea in the app, it is removed, and deleted files are removed from storage. Deleting a project removes its brief, messages and reviews; its files stay in your asset library until you delete them. A project with a final video or a payment on record can be archived but not deleted.
- Payment records are kept even if a project is archived.
What choices and rights do you have?
- Update your name, role, company, website and WhatsApp number in Settings, and turn WhatsApp updates on or off.
- Delete files, ideas and projects in the app (subject to the payment rule above).
- Change your password at any time.
- Clear the
vpx_sourcerecord by clearing your browser's site data. - Ask us for a copy of your data, to correct it, or to delete your account, by emailing hello@vpixai.com. There is no self-service account deletion in the app yet.
Depending on where you live, you may have further rights under data protection law, such as the right to object or to complain to your local data protection authority.
How do we protect your information?
Passwords are hashed with scrypt and a unique salt. The session cookie can't be read by scripts on the page and is sent only over HTTPS. Files are stored in a private bucket and shared only through signed links that expire, after the server checks you are allowed to see the file. Sign-up and login are rate-limited and protected against bots. No system is perfectly secure, but we work to keep your information safe.
Children
vpixai is a service for businesses. It is not meant for children, and we don't knowingly collect information from them.
Changes to this policy
If we change how we handle personal information, we will update this page and the "Last updated" date at the top. For significant changes, we will also let account holders know.
Contact
Questions or requests about your data: hello@vpixai.com.