Privacy Policy

1. Information we collect

When you sign in with Google, we receive your email, Google identifier and basic profile information. We also process your username, privacy settings, prompts, source images, generation settings, outputs, task history and credit usage. Account details and tool inputs are needed to provide the features you request. Only submit information you are entitled to share.

Stripe processes checkout and billing information. We keep subscription details, payment status and transaction references, but do not store full card numbers or security codes. We also process IP addresses, browser information, error records and messages you send us for support.

2. How we use information

We process account, content and payment data to provide Vimugo under our contract with you. Accounting and required disclosures meet legal obligations. Security, abuse prevention, troubleshooting, support and handling disputes rely on our legitimate interests, balanced against your rights. Where consent is required, we request it separately.

Automated safety checks may reject requests or temporarily limit generation after repeated blocked requests. Contact us if you believe a restriction is incorrect.

3. Profile and gallery visibility

Your profile page and username are public, but your gallery is private by default. Enabling Public gallery in Account settings makes all saved outputs, their prompts and generation details public. Your Google name, email and billing details are not displayed publicly.

Uploaded originals are not published, although outputs may reveal information from them. You can make your gallery private or delete outputs. This stops public access through Vimugo, but copies already saved by others may remain outside our control.

4. Service providers and sharing

We use hosting and security providers, Google for sign-in and Stripe for payments. Generation sends your prompts, settings and source images to fal.ai and the relevant model provider. Safety checks also use OpenRouter and the moderation provider, currently OpenAI. We do not add your Google name, account email or billing details to these requests.

Cloudflare delivers and protects the site. Turnstile processes IP addresses, browser information and connection signals to detect bots and improve that protection. Details appear in Cloudflare's Privacy Policy and Turnstile Privacy Addendum.

We may disclose relevant information to meet legal obligations or defend legal claims. Our providers may process information outside the European Economic Area. These transfers require an adequacy decision or other lawful safeguards. Contact us for information about these transfers or a copy of applicable safeguards.

5. Cookies and browser storage

Essential cookies keep you signed in and protect requests. Browser storage remembers your theme preference. Cloudflare may also use security cookies. You can manage these through your browser, but blocking essential cookies may prevent some account features from working.

6. Storage, security and deletion

Uploaded originals, including embedded metadata, are sent to provider storage. Vimugo does not keep a separate permanent source copy. Where supported, we request one-hour expiry for provider media files. Provider logs and other records may follow different retention periods under their own policies.

Your gallery keeps the latest 100 successful outputs, removing older files as new ones arrive. Deleting an output does not automatically erase its prompt, task history or credit record.

We retain account and operational records as needed to maintain your account, verify usage, resolve disputes and meet legal retention requirements. Contact us to request account or data deletion. Some records may remain necessary to meet legal obligations or establish, exercise or defend legal claims. We use reasonable safeguards to protect information, but no online service can guarantee absolute security.

7. Your rights and policy updates

Where applicable, you can request access, correction, deletion, restriction or a portable copy of your data, and object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. Contact us using the details below. We may verify your identity and will respond within the applicable legal deadline. You may also complain to your local data protection authority, including the Estonian Data Protection Inspectorate.

We may update this policy as our practices or legal requirements change. We will provide notice or request consent where required by law.