Privacy Policy

We collect the following information when you use Vonlo:

• Account data: Your name and email address when you sign up.
• Usage data: How many videos you process, which platforms you generate for, and your plan tier.
• Video content: Videos you upload are temporarily stored only for the purpose of transcription and are permanently deleted immediately after processing. We do not keep copies.
• Transcripts: The text transcript generated from your video is stored to power the generation feature and your history.
• Generated content: The content we generate for each platform is stored in your history so you can access it later.
• Payment data: Processed by Stripe. We never see or store your card details.

• To provide and improve the Vonlo service
• To track your usage against your plan limits
• To send transactional emails (account confirmation, receipts)
• To process payments via Stripe
• To respond to support requests

We do not use your video content, transcripts, or generated content to train AI models. Your content is yours.

We take the privacy of your video content seriously. Here is exactly what happens when you upload a video:

1. Your video is uploaded to a private, encrypted storage bucket.
2. We generate a temporary signed URL (valid for 60 seconds) and send it to AssemblyAI for transcription.
3. Your video is permanently deleted from our storage immediately after transcription completes.
4. We never share your video with any party other than AssemblyAI for the sole purpose of transcription.

Vonlo uses the following third-party services:

• Supabase — database and authentication (EU/US infrastructure)
• AssemblyAI — speech-to-text transcription
• Anthropic — AI content generation via Claude
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — hosting and infrastructure

Each of these services has their own privacy policy. We only share the minimum data necessary for each service to function.

• Videos: Deleted immediately after transcription
• Transcripts and generated content: Retained until you delete them or close your account
• Account data: Retained until you close your account
• Usage logs: Retained for 90 days for billing and abuse prevention

You have the right to:

• Access the data we hold about you
• Delete your account and all associated data via Settings → Danger Zone
• Export your generated content at any time
• Opt out of non-transactional emails

To exercise any of these rights, email us at hello@vonlo.io or use the account deletion feature in your settings.

We implement industry-standard security measures including:

• Row-level security on all database tables — users can only access their own data
• Private storage buckets with signed URLs for temporary access
• All API keys stored as server-side environment variables — never exposed to the client
• HTTPS enforced on all connections