Privacy Policy

Updated October 18, 2026

vbros turns your photos and prompts into images and short videos with AI. It is provided by a sole proprietor based in the United Arab Emirates, trading as vbros (“we”), who is the data controller. Contact: support@vbros.app or the Support form in your profile. By using vbros you accept this Policy and the Terms of Service.

What we collect

• Account: your e-mail; with Google sign-in, also your name and profile picture (see Google user data below). Code sign-in uses no password.
• Content: photos you upload, photos, voice samples and character sheets you add in Studio, prompts and settings, and generated results.
• Usage: presets you run, credits spent, saves and downloads.
• Subscription: current plan and billing period. Payments and card details are handled by Dodo Payments; we never see your card.
• Technical: IP address, browser type and request times from hosting logs.

How we use it

To sign you in, generate and store results, count credits, manage your plan, send sign-in codes, answer support requests, find errors and see which features are used. We do not sell your data, use it for advertising or train AI models on your photos or results.

Photos and results

An uploaded photo is sent to the AI model with your prompt and discarded once the result is ready, unless you add it to Studio. Results are private and visible only to you. Unsaved results are deleted after 24 hours; saved results and Studio elements stay until you delete them. By uploading a photo you confirm you have the right to use it.

Who processes your data

• Supabase — sign-in, database and file storage.
• OpenRouter and the AI model providers behind it (Google, OpenAI, ByteDance, Black Forest Labs and others) — your photos and prompt, to make the result.
• Google — sign-in, if you choose it.
• Resend — sign-in codes and support e-mails.
• Dodo Payments — our reseller and Merchant of Record for paid plans.
• Railway — hosting.
• PostHog — analytics of opened pages and clicks, linked to your account only if you accept cookies.

These providers process data in the United States and the European Union; by using vbros you consent to this transfer.

Google user data (Google API Services)

This section summarises how vbros handles Google user data, as required by the Google API Services User Data Policy.

• Accessed: only your basic profile — name, e-mail address and profile picture (OAuth scopes email, profile, openid). No other Google data is requested.
• Used: to create your vbros account, sign you in and show your name and avatar in the profile. Nothing else.
• Stored: in our authentication database (Supabase) for as long as your account exists.
• Shared: with no one. Google user data is not transferred to AI model providers, Dodo Payments or any other third party, and is never sold or used for advertising.
• Protected: transmitted over HTTPS, stored with access limited to your account, never exposed to other users.
• Deleted: together with your account, on request, within 30 days.

vbros' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and your rights

We keep your data while your account exists; results and Studio elements you can delete yourself at any time. To get a copy of your data, correct it or delete your account, write to support@vbros.app or use the Support form. Deleting the account removes all your data within 30 days, except logs and payment records the law requires us to keep. The service cannot work without this data, so withdrawing consent means deleting the account.

Security

Data travels over HTTPS; files are kept in private storage with signed links, accessible only to your account. No system is perfectly secure, so do not upload photos you would not want processed by an AI service.

Cookies

Browser storage keeps you signed in and remembers interface settings. PostHog analytics cookies are set only if you accept them in the cookie banner; otherwise visits are counted anonymously, without cookies. Change your cookie choice.

Children

vbros is not for anyone under 13. If you believe a child has an account, contact us and we will delete it.

Changes

We may update this Policy; the date above shows the current version. We will e-mail you before changing how we use Google user data. Using vbros after an update means you accept it.