Skip to main content

Legal

Privacy Policy

How VEXA collects, uses, stores, and protects information when you use the service.

Last updated March 28, 2026

1. Information We Collect

We collect the following information when you use VEXA:

  • Account Information: Name, email address, and hashed password when you register.
  • Usage Data: Prompts, generated images, workflow configurations, and token transactions.
  • Payment Data: Processed securely by Stripe. We do not store your credit card details.

2. How We Use Your Information

  • To provide and maintain the Service.
  • To process payments and manage token balances.
  • To store generated content in your personal asset vault.
  • To improve the Service and fix issues.

3. Data Storage & Security

Your data is stored in a secure MySQL database. Passwords are hashed with bcrypt. Session tokens use JWT with HTTP-only cookies. We use industry-standard measures to protect your data.

4. Third-Party Services

We use the following third-party services:

  • Google AI (Gemini/Imagen): For AI image generation and text processing. Your prompts are sent to Google's API.
  • Stripe: For secure payment processing.

5. Data Retention

Your data is retained as long as your account is active. If you delete your account, all associated data, including images, workflows, and transactions, will be permanently removed.

6. Your Rights

You have the right to:

  • Access your personal data through the Profile page.
  • Update your account information.
  • Delete your account and all associated data.
  • Download generated images from the Asset Vault.

7. Cookies

We use a single HTTP-only session cookie for authentication. We do not use tracking or advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy at any time. We will notify users of significant changes through the Service.

9. Contact

For questions about this Privacy Policy, contact us through the channels provided on our website.