Privacy Policy
Last updated: 7 September 2026
This policy explains what personal data VibeSlate ("VibeSlate", "we", "us") processes when you use our website, application and related services (the "Service"), why we process it, and the choices you have. It forms part of our Terms of Service.
1. Data we process
Account data. If you register, we store your email address, the identifier returned by your sign-in provider when you use Google, verification codes and their expiry, and your credit balance and its history. If you use the Service without registering, we store an anonymous identifier in your browser instead; it is not linked to your name.
Project content. The files you upload (video, audio, images and other media), the prompts, scenarios and instructions you write, derived material generated from them (transcripts, descriptions, waveforms, previews, proxies, figures, generated voices and sounds, browser recordings, exported videos), and the project structure itself. Project content may contain personal data if you choose to include it; you decide what you upload.
Usage and technical data. Request logs, timestamps, IP address, browser and device information, feature and error events, and processing traces used to debug and measure the Service.
Payment data. If you buy credits, our payment providers process your payment details. We receive only the transaction result and metadata; we do not store full card numbers.
2. Why we process it and on what basis
| Purpose | Basis (GDPR) |
|---|---|
| Providing the Service, running the editor, processing media, generating output | Performance of a contract |
| Account creation, sign-in and email verification | Performance of a contract |
| Billing, credits, fraud and abuse prevention | Contract; legitimate interests |
| Security, debugging, reliability and capacity planning | Legitimate interests |
| Improving and developing features, aggregate statistics | Legitimate interests |
| Service and transactional emails | Contract; legitimate interests |
| Meeting legal, tax and accounting obligations | Legal obligation |
We do not sell personal data, and we do not use your project content for advertising.
3. Automated processing and providers
Producing the results you ask for requires sending relevant parts of your project content to third-party processors, for example large language and generation models, speech transcription and synthesis, sound and music generation, media processing, email delivery, sign-in, hosting and payment providers. We send only what a given operation needs and instruct these providers to process the data on our behalf. Some of them may retain content briefly for abuse monitoring under their own terms.
Browser recording opens public web pages you describe in a scenario and captures the resulting frames. Anything visible on the recorded page, including data you cause it to display, becomes part of the recording.
The Service does not make decisions producing legal or similarly significant effects about you by automated means.
4. Cookies and local storage
We use cookies and browser storage that are necessary to operate the Service: keeping you signed in, holding an anonymous session, and remembering local editor preferences such as timeline state. We do not use advertising or cross-site tracking cookies.
5. Sharing
We share personal data only with the processors described above, with professional advisers, and with authorities or other parties where required by law or where necessary to establish, exercise or defend legal claims, to enforce our Terms, or to protect the rights and safety of our users and third parties. In a merger, acquisition or sale of assets, data may transfer to the acquirer subject to this policy.
If you publish an exported video, the video becomes accessible to anyone who has its public link until it is removed.
6. International transfers
Our providers may process data outside your country, including in the United States. Where such a transfer leaves the European Economic Area or the United Kingdom, it is covered by an adequacy decision or by standard contractual clauses together with additional safeguards where required.
7. Retention
Project content is kept while your account or project exists, and is deleted when you delete the project or your account, subject to short-lived backups and caches that expire in the ordinary course. Anonymous browser sessions and their projects are removed after a period of inactivity. Debug traces and failed-capture artefacts are kept only briefly. Account, billing and transaction records are kept as long as legally required, typically for accounting and tax periods.
8. Security
We use technical and organisational measures appropriate to the risk, including transport encryption, access control and isolation between projects. No service can be completely secure, and we cannot guarantee absolute security. Keep your email account and credentials protected, and do not upload material you cannot afford to have exposed.
9. Your rights
Subject to applicable law, you may request access to your personal data, its correction, deletion or portability, restriction of or objection to processing, and withdrawal of consent where processing relies on consent. Withdrawal does not affect processing already carried out. You can delete projects and their media from the editor at any time. To make a request, contact us at the address below; we may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority.
10. Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes
We may update this policy. Material changes take effect when the updated policy is posted with a new "last updated" date. Continued use of the Service after that date means you accept the updated policy.
12. Contact
Privacy questions and data requests: [email protected].