Privacy Policy
Last updated: 31 October 2026
This policy explains which personal data VeloraStudio collects, why, and what your rights are under the GDPR.
Data controller
Velora System, Rue du Meunier 45, 7830 Silly (Graty), Belgium. Contact for any privacy request: contact@velorasystem.eu.
What we collect and why
- Account: email address, password (encrypted) or Google sign-in, and the date you confirmed being 18+ and accepted our terms. Purpose: providing the service (contract).
- Generations: prompts, start images you upload, generated videos and settings. Purpose: providing the service (contract).
- Credits and payments: credit history and payment references. Card details are handled by Stripe only. Purpose: contract and legal accounting obligations.
- Security and moderation logs: IP address, browser, dates of generations, blocked prompts and reports. Purpose: preventing abuse and illegal content (legitimate interest and legal obligations).
We do not sell your data and we do not use it for advertising.
Who receives your data
Only the service providers we need to run VeloraStudio, under contract and on our instructions:
| Supabase | Accounts, database and video storage (EU region) |
| Vercel | Website hosting (servers in Paris, France) |
| Higgsfield | AI video generation: receives your prompt and the scene or start image |
| fal.ai | AI image generation and captions: receives your prompt, character photos and the video soundtrack |
| Anthropic | Writes story scripts: receives your story idea and your characters' names and descriptions |
| Resend | Sends account emails (sign-in links) |
| Stripe | Payments |
| Only if you choose “Continue with Google” |
Some of these providers are located in the United States. Transfers are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.
How long we keep it
- Account and videos: as long as your account is open. Deleted videos are removed from storage immediately.
- Credit and payment records: 10 years (accounting obligations).
- Security and moderation logs: 12 months.
- After closing your account, data is deleted or anonymised, except what we must keep by law.
Cookies
We only use cookies that are strictly necessary to keep you signed in and secure the service. We use no advertising or tracking cookies, so no consent banner is required.
Your rights
You can access, correct, delete or export your data, object to or restrict its processing, and give instructions for after your death. Write to contact@velorasystem.eu. We answer within one month. You may also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, dataprotectionauthority.be) or with the authority of your country of residence.