Privacy Policy

Information we process

We process your account email and, if you choose Google sign-in, the account identifiers and profile information Google supplies with your authorization. We also process uploaded photos, derived images, generated videos, template and generation choices, job status, credit balances, and purchase or refund records. Support requests include the information and attachments you choose to send.

Operating and security data may include IP addresses, browser and device information, session identifiers, request times, errors, and moderation results. Cookies and browser storage support sign-in, preferences, and draft photos. Photos selected on your device may be stored locally before upload; clear site data on a shared device when finished.

Why we use information

We use this information to authenticate accounts, generate and deliver videos, maintain credit and order records, answer support requests, detect abuse, enforce our policies, and meet legal obligations. Where GDPR or similar rules apply, our bases include performing our contract with you, legitimate interests in securing and operating the service, legal obligations, and consent for optional analytics or other processing that requires consent. We do not sell your personal information or share it for cross-context behavioral advertising.

Video completion emails

When your video finishes generating, we email a link and the video's expiry date. For guest purchases, use the emailed link or recover your creations with your checkout email. For videos created while signed in, sign in with the same account to watch or download them; forwarding that account email does not give another account access. You can also find your video in My creations if the email is delayed or missing.

AI generation and service providers

When you start generation, your photos and generation instructions are transmitted to the image, video, and safety service providers needed to complete the job. Video generation includes Seedance 2.5 by ByteDance, accessed through generation infrastructure providers. Hosting, storage, authentication, email, and security providers also process information needed to deliver their services. Authorized administrators may access content for support, safety review, and troubleshooting.

Vellm does not use your uploaded photos or generated videos to train its own AI models. Third-party providers process submitted content under their own applicable terms and retention practices; this statement is not a promise about every provider's model-training practices. Do not upload content you are not authorized to share with the services necessary to generate your video.

Payments through Stripe

Oakrelay Labs LLC is the seller of Vellm purchases. Stripe processes payment and billing information for us. It may receive your email, order details, billing information, and payment details to handle transactions, tax, fraud checks, receipts, and refunds. We receive transaction references, amounts, currency, tax, payment status, and related order information. We do not store full card numbers or card security codes. Stripe's own privacy policy governs its independent processing.

Subscriptions and orders you started through Waffo Pancake are still billed by Waffo Pancake as merchant of record until they end. Its terms and privacy policy apply to them, and their refunds are handled through Waffo Pancake.

Cookies and optional analytics

Necessary cookies and storage support authentication, security, and site preferences. We use Google Analytics 4 and Microsoft Clarity to understand how the site is used: they receive usage, device, browser, and network information, and Clarity records interactions such as scrolling and clicks. Neither is used for advertising. Google Analytics runs in Google Consent Mode: in the EEA, the UK, and Switzerland we ask first, and until you accept no analytics cookies are set, Clarity does not load, and Google Analytics receives only cookieless measurements without a stored identifier. Elsewhere analytics is on by default. You can accept or decline at any time using Cookie settings in the footer; withdrawing consent stops future optional tracking but does not undo previous lawful processing.

You can also control cookies and local storage in your browser. Blocking essential storage may prevent sign-in or other core functions. Google and Microsoft publish their own privacy policies, linked below.

To prevent referral abuse, we record a keyed hash of your browser identifier and IP address when you open your invite link, sign in, or check out. We never store these in plain text.

Retention and deletion

Photos used for generation and derived images are scheduled for deletion after 7 days; generated videos after 30 days. Periodic cleanup, active jobs, technical retries, or legal preservation may affect the exact deletion time. These schedules concern Vellm-controlled storage and do not promise identical deletion timing in a provider's systems or backups.

Account and credit records are kept while needed to provide your account. We retain transaction, support, and security records only as needed to resolve requests, prevent abuse, handle disputes, or satisfy legal retention requirements. You may request account deletion; records that must be retained for legal reasons are restricted to that purpose. Contact us for information about retention of a particular record.

Create: your files and prompts

On the Create page you can upload your own videos and photos as references, reuse earlier results, and write text prompts. When you generate, these are sent to AI image and video generation services to make your videos and images. Before that, your prompts and reference files, including frames from your videos, may be checked by automated moderation services. Your Create results are never made public; site administrators can view them to moderate content and handle support.

Uploaded videos and photos are scheduled for deletion 7 days after upload, and generated videos and images 30 days after they are made. Download anything you want to keep. Your prompts and settings are saved with each job so you can see and reuse them; they are kept until you ask us to delete your data.

Security, disclosures, and international processing

We use HTTPS, access controls, and restricted file access to protect information. No system guarantees absolute security. Keep sign-in codes and private download links confidential. We may disclose information when required by law, to investigate abuse or protect rights and safety, or with your consent.

Vellm uses service providers whose infrastructure may process information in countries other than the one where you live. Privacy laws may differ from those where you live. Where applicable law requires safeguards or consent for international transfers, those requirements apply. Contact support@vellm.app for information about a specific provider or transfer.

Your choices and rights

Depending on your location, you may request access, a copy, correction, deletion, portability, restriction of processing, or object to certain processing. You may withdraw consent for consent-based processing and complain to your local privacy regulator. We will not discriminate against you for exercising applicable privacy rights.

Email support@vellm.app from your account address. We may ask for proportionate proof of identity to protect your account. We aim to respond within 30 days and will follow applicable legal deadlines, including informing you of any permitted extension. Optional analytics consent can be changed immediately in Cookie settings.

Adults only and policy changes

Vellm is for people aged 18 or older, and uploads depicting minors are prohibited. If you believe a minor's information has been submitted, contact support@vellm.app so we can investigate and remove it as appropriate. Material policy changes will be announced on the site or by email as required, and this page will show the updated date.