This Privacy Policy explains how Vireo Studio (“Vireo Studio”, “we”, “us”) collects, uses, and safeguards your information when you use our website and application at vireostudioai.com (the “Service”). By using the Service you agree to the practices described here.
Who we are#
Vireo Studio is operated from Türkiye. For any question about this policy or your data, contact support@vireostudioai.com.
We are the data controller for the information described below. Because we operate from Türkiye we are subject to the Turkish Personal Data Protection Law (KVKK, Law No. 6698); where you are in the EU/EEA or the UK, the GDPR and UK GDPR also apply to our processing of your data.
Purchases are a separate matter: our payment provider acts as merchant of record, which means it — not Vireo Studio — is the seller for the transaction and the controller of your payment details. See Refund & Cancellation.
Information we collect#
- Account information — your name and email address, provided when you sign up or sign in (including via Google).
- YouTube channel data— if you connect your YouTube account. See “YouTube and Google data” below for exactly what we read and why.
- Content you create — the ideas, outlines, scripts, and channel information you generate or store in the Service.
- Billing information — handled by our third-party payment provider. We receive your subscription plan, status, and transaction records, but we never receive or store your full card details.
- Usage data — basic technical information such as log data and feature usage, used to operate and improve the Service.
How we use your information#
We use your information to:
- Provide, maintain, and improve the Service;
- Generate AI content you request and save your work;
- Process subscriptions and provision credits;
- Send account, billing, and service notifications;
- Detect, prevent, and address abuse or technical issues.
Payments#
Checkout happens on our payment provider’s own hosted page — we never see or handle your card details, and no payment form is served from vireostudioai.com. The provider acts as merchant of record, collecting and storing your payment information under its own privacy policy and security standards. We receive only what we need to manage your subscription: plan, status and transaction records. Applicable taxes are calculated and collected at checkout.
YouTube and Google data#
The Service uses YouTube API Services. If you connect your YouTube account, you grant read-only access and we read:
- your channel’s public profile and statistics;
- the list and public metadata of your videos;
- the captions of a small sample of your own videos (currently up to ten), used to learn how you write and speak so scripts can be matched to your voice.
Caption text from that sample is sent to our AI model provider to produce your writing profile, and the resulting profile is stored in your account. We do not publish it, sell it, or use it for anyone else’s account. We do not post to, modify, or delete anything on your YouTube channel — the access we request is read-only.
By using these features you also agree to the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.
You can revoke our access at any time from your Google security settings, or by disconnecting YouTube in your Vireo Studio account. Revoking access stops any further reading; data already stored is deleted with your account or on request.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
AI processing#
Content you submit for generation — including the YouTube caption sample described above — is sent to our AI model provider solely to return the output you asked for. We do not sell your content and we do not use it to train AI models, ours or anyone else’s. Model providers process it under their own terms as our processors; we do not authorise them to train on it.
Who processes your data#
We do not sell your personal data. We share it only with the providers below, each acting on our instructions to deliver part of the Service, and otherwise only where required by law:
- Supabase — account database and authentication;
- Vercel — application hosting and privacy-friendly, cookieless analytics;
- OpenRouter — routing to the AI models that generate your content;
- Resend — transactional email (account, billing and service notices);
- Lemon Squeezy and Paddle — payment processing as merchant of record;
- Google / YouTube — only where you connect your YouTube account.
International transfers.These providers operate outside Türkiye, principally in the United States and the European Union, so using the Service involves transferring your data abroad. We rely on the providers’ own transfer safeguards, such as the European Commission’s Standard Contractual Clauses, and on your explicit consent under KVKK Article 9 where that applies.
Why we are allowed to process your data#
Under the GDPR and UK GDPR, we rely on:
- Performance of a contract — to run your account, generate the content you ask for, and manage your subscription;
- Consent — to read your YouTube data, which you give by connecting your channel and can withdraw at any time by disconnecting it;
- Legitimate interests — to keep the Service secure, prevent abuse, and improve how it works;
- Legal obligation — to keep records we are required to keep, such as for tax.
Under KVKK we process personal data on the corresponding grounds in Articles 5 and 6, including where processing is necessary for a contract to which you are a party.
Data retention#
We keep your account and the content in it for as long as your account is active. You can delete individual content at any time, and you can ask us to delete your account by emailing support — we action account deletion within 30 days, after which your content and writing profile are removed from our systems. Records we are legally required to keep, such as transaction records for tax purposes, are retained for the period the law requires.
Your rights#
Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent you have given. To exercise these rights, contact us at support@vireostudioai.com. We answer within 30 days.
If you think we have handled your data improperly you can complain to a regulator. In Türkiye that is the Personal Data Protection Authority (KVKK); in the EU/EEA or the UK it is the supervisory authority where you live.
Security#
We use industry-standard measures to protect your data in transit and at rest. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.
Changes to this policy#
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.
Contact#
Questions about this policy? Email support@vireostudioai.com.