Privacy Policy

Introduction & Scope

VAIF STUDIO LLC ("VAIF Studio," "we," "us," or "our") is a Michigan limited liability company. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you access or use the VAIF Studio platform, website, APIs, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information:

• Account Data: When you register, we collect your name, email address, password (hashed), and optional company or organization name.
• Usage Data: We automatically collect information about how you interact with the Service, including API call volumes, feature usage, page views, IP addresses, browser type, and device information.
• Content & Files: Data you create, upload, or store through the Service, including project schemas, database records, generated code, configuration files, and file storage uploads.
• Payment Data: When you subscribe to a paid plan, billing information such as your name, billing address, and payment method details are collected and processed by Stripe, our third-party payment processor. We do not store full credit card numbers on our servers.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process transactions, manage subscriptions, and send invoices.
• Send transactional communications such as account confirmations, security alerts, and support responses.
• Monitor platform performance, diagnose technical issues, and improve the Service.
• Enforce our Terms of Service and protect against fraud or abuse.
• Comply with legal obligations.

AI & Copilot Data Use

VAIF Studio includes AI-powered features, including VAIF Copilot, which generates code, schemas, and other content based on your prompts. We want to be transparent about how your data is handled in this context:

• Your prompts and generated code are not used to train AI models unless you provide explicit, opt-in consent.
• Prompts are sent to third-party AI providers (Anthropic and OpenAI) for processing. These providers process data according to their own API data usage policies, which prohibit using API inputs for model training.
• We may retain AI interaction logs for up to 90 days for debugging, abuse prevention, and service improvement purposes. These logs are not used for model training.

Data Sharing & Third-Party Processors

We do not sell your personal information. We share data with third-party service providers only as necessary to operate the Service:

• Stripe — Payment processing and subscription billing.
• Resend — Transactional email delivery.
• Anthropic & OpenAI — AI features and code generation.
• Google Cloud Platform — Infrastructure hosting, compute, and storage.

Each processor is contractually obligated to handle your data in accordance with applicable data protection laws. We may also disclose information if required by law, legal process, or to protect the rights and safety of VAIF Studio, our users, or the public.

Your Rights (GDPR & Global Privacy)

If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request a machine-readable copy of your data for transfer to another service.
• Restriction: Request that we limit the processing of your personal data under certain circumstances.
• Objection: Object to the processing of your personal data for specific purposes.

To exercise any of these rights, contact us at legal@vaif.studio. We will respond to requests within 30 days.

Data Retention

We retain your information for the following periods:

• Account data: For the duration of your active account, plus 30 days after account deletion to allow for recovery.
• Usage and AI interaction logs: 90 days.
• Billing and payment records: 7 years, as required by applicable tax and financial regulations.

After the applicable retention period, data is permanently deleted or anonymized.

Security

We implement appropriate technical and organizational measures to protect your data, including encryption of data in transit (TLS) and at rest, access controls, regular security reviews, and infrastructure monitoring. While we strive to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Cookies

We use essential cookies only, required for session authentication and security. We do not use analytics, advertising, or tracking cookies. For full details, see our Cookie Policy.

Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at legal@vaif.studio.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by email or in-app notification. Your continued use of the Service after any changes constitutes acceptance of the updated policy.