Privacy Policy

Last updated: March 10, 2026 (23 days ago)

1. Information We Collect

Account Information: When you register, we collect your email address, name, and password (stored in hashed form). We do not store payment card details — all payment processing is handled by our third-party payment processor (Stripe).

Usage Data: We collect information about how you use the Service, including models used, credit consumption, timestamps, and feature interactions. This data is used to improve the Service and provide your usage dashboard.

Prompts and Generations: Your prompts and generated outputs are processed by third-party AI model providers. We temporarily store generation metadata (model used, timestamp, credit cost) for your history dashboard. Full prompt content is retained for up to 90 days and then permanently deleted.

Technical Data: We automatically collect IP addresses, browser type, device information, and referring URLs for security and analytics purposes.

2. How We Use Your Information

To provide and maintain the Service
To process payments and manage subscriptions
To display your usage history and credit balance
To communicate important updates about the Service
To detect and prevent fraud, abuse, and security threats
To improve and optimize the platform

We do not sell your personal information. We share data only with:

AI Model Providers: Your prompts are sent to third-party model providers (e.g., OpenAI, Anthropic, Google) to generate responses. These providers have their own privacy policies.
Payment Processor: Stripe processes your payment information under their privacy policy.
Legal Compliance: We may disclose information if required by law or legal process.

4. Data Retention

Account information: retained while your account is active
Generation metadata: retained for 90 days, then permanently deleted
Payment records: retained as required by tax and financial regulations
You may request account deletion at any time through your dashboard

5. Your Rights

Depending on your jurisdiction, you may have the right to: - Access the personal data we hold about you - Request correction of inaccurate data - Request deletion of your data - Export your data in a portable format - Object to certain data processing activities

To exercise these rights, contact privacy@vincony.com.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and secure authentication. However, no system is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

Vincony is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. Users aged 13–17 may use the Service only with verifiable parental or guardian consent. If we become aware that a child under 13 has provided us with personal data without parental consent, we will take steps to delete it. Parents or guardians who believe their child has provided personal information without consent may contact us at privacy@vincony.com to request deletion.

8. International Transfers

Your data may be processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

For users in the European Economic Area and the United Kingdom, we process personal data under lawful bases including consent, contract performance, and legitimate interests.

We comply with the EU General Data Protection Regulation (GDPR) and the UK GDPR as retained under the Data Protection Act 2018. The UK GDPR applies to the processing of personal data of individuals in the United Kingdom and imposes equivalent obligations to the EU GDPR.

Data Controller: VINCONY AI LTD (Company Number: 17047337), 3rd Floor, 86-90 Paul Street, London EC2A 4NE, England.

Our Data Protection Officer can be reached at dpo@vincony.com.

UK Representative: As VINCONY AI LTD is established in the UK, no separate UK representative is required.

10. CCPA / US State Privacy Rights

If you are a resident of California or another US state with consumer privacy legislation, you have the following rights:

Right to Know: You may request details about the personal information we collect, use, and disclose.
Right to Delete: You may request deletion of the personal information we hold about you, subject to certain exceptions.
Right to Opt Out of Sale: Vincony does not sell or share your personal information with third parties for monetary or other valuable consideration. We have never sold user data and have no plans to do so.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact privacy@vincony.com with the subject line "US Privacy Rights Request". We will respond within 45 days as required by applicable law.

Do Not Sell or Share My Personal Information: Vincony does not sell or share personal information as defined under the CCPA or other US state privacy laws.

11. Canadian Privacy Rights (PIPEDA / Quebec Law 25)

If you are a resident of Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) and, if you reside in Quebec, Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

Under these laws, you have the right to:

Access: Request access to the personal information we hold about you
Correction: Request correction of inaccurate or incomplete personal information
Withdraw Consent: Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions
File a Complaint: File a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information du Québec

Consent: We obtain your meaningful consent before collecting, using, or disclosing your personal information. Where required by Law 25, we obtain express consent for sensitive personal information.

Cross-Border Transfers: Your personal information may be transferred to and processed in countries outside Canada, including the United States and the United Kingdom. We ensure that appropriate contractual and technical safeguards are in place to protect your data during any cross-border transfer.

Privacy Officer: Our designated privacy officer can be reached at privacy@vincony.com.

To exercise any of these rights, contact privacy@vincony.com with the subject line "Canadian Privacy Rights Request". We will respond within 30 days as required by applicable law.

Your cookie consent preferences are stored locally on your device and are not transmitted to our servers. We respect both the Do Not Track (DNT) and Global Privacy Control (GPC) browser signals — when either signal is enabled, analytics cookies are disabled automatically. You can manage your cookie preferences at any time via the "Cookie Settings" link in the footer of every page.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service.

14. Contact

For privacy-related inquiries, contact VINCONY AI LTD at privacy@vincony.com.