Privacy Policy
This Policy describes what information Vero collects, how we use and store it, who we share it with, and the choices and rights you have.
1. Overview
This Privacy Policy explains how Vero, operated by Francis Beaudet Neron ("Vero", "we", "us", or "our"), collects, uses, shares, and protects information when you use the Vero platform (the "Service"), which turns text prompts into short-form videos for YouTube Shorts, TikTok, Instagram Reels, and future supported platforms.
By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
2. Information Collected
Account information
- Email address.
- Authentication identifiers used to sign you in and secure your account.
Usage information
- Projects you create.
- Prompts and inputs you provide.
- Generated videos and related assets.
- Publishing history for content you publish through the Service.
- Analytics associated with your account and content.
Connected accounts
- YouTube authorization, when you connect a YouTube account to publish or read analytics.
- Future publishing platforms you choose to connect.
Payment information
Payments are processed by third-party payment processors, currently Stripe. We do not store complete payment card numbers. Payment processors handle your payment information under their own terms and privacy policies. We receive only the limited billing details, such as subscription status and the outcome of a transaction, needed to manage your account.
API keys
If you use Bring Your Own Key, we collect the provider API keys you choose to add. User-provided API keys are encrypted at rest.
3. Data Storage
We use Supabase to store account data, project data, and related records in a managed database, and Supabase Storage to store media assets such as audio and rendered video.
User-provided API keys are encrypted before they are stored. We take reasonable measures to protect data at rest and in transit, as described in the Security section.
4. Third Parties
We share information with third-party service providers only as necessary to operate and provide the Service. The categories of providers we use are:
Infrastructure
- Supabase - managed database, authentication, and file storage.
- Amazon Web Services (AWS) - video rendering and related cloud infrastructure.
Payments
- Stripe - payment processing, subscriptions, and credit purchases.
Authentication
- Authentication providers - to sign you in and secure your account.
AI providers
- AI providers - to generate scripts, images, voiceover, and video from your inputs, including providers such as OpenAI, Anthropic, Google, and ElevenLabs, and, for AI video generated with your own key, Kling.
Stock media
- Pexels and Pixabay - to search and retrieve stock video and images based on your project topics and scene descriptions.
Publishing
- Google and YouTube, and future supported publishing platforms - to authenticate connected accounts and to publish or read analytics when you request it.
Each provider processes information only as needed to provide its services to us, under its own terms and privacy policy. We do not sell your personal information.
5. AI Usage
We use AI providers to process your prompts and inputs and to generate output for you. Vero does not use User Content to train our own AI models. Third-party AI providers may process information according to their own terms, privacy policies, and agreements.
When you use Bring Your Own Key, your inputs are processed by the provider whose key you supply, under that provider's terms and policies.
AI-generated content may contain errors or inaccuracies, may not always be unique, and may not be suitable for every purpose. You should review all generated output before using or publishing it.
Vero does not guarantee that generated content will be accepted, approved, monetized, promoted, or reach any particular audience on any third-party platform. See the Third-Party Platform Compliance section for more detail.
6. Automated Processing
Vero uses automated systems, including artificial intelligence technologies, to process user inputs and generate content such as scripts, images, voiceovers, videos, titles, descriptions, and other related outputs based on user instructions.
These automated systems assist with content creation and workflow automation but do not replace user review or decision-making. Users are responsible for reviewing generated content before publishing and ensuring that their content complies with applicable laws, regulations, and third-party platform policies, including YouTube, TikTok, Instagram, and other supported platforms.
Vero does not guarantee that AI-generated outputs will always be accurate, complete, unique, or suitable for every purpose. Users should evaluate generated content before use or publication.
7. User Content and Generated Content
"User Content" means the prompts, text, images, audio, and other materials you upload or provide, together with the scripts, images, voiceovers, videos, titles, descriptions, and other outputs generated for you through the Service.
As between you and Vero, you retain ownership of the content you upload or provide and, to the extent permitted by applicable law and by the terms of any third-party AI providers you use, of the outputs generated from your inputs. Ownership of AI-generated outputs can depend on applicable law and on the policies of the AI providers involved, and Vero makes no representation that any particular output is protectable or free of third-party rights.
You grant Vero a limited, non-exclusive, worldwide, royalty-free license to host, store, process, reproduce, and display your User Content solely as necessary to operate, secure, and provide the Service to you. This license ends when your User Content is deleted, except for residual copies retained for a limited period in backups or as required by law.
You are responsible for reviewing generated content before using or publishing it, and for ensuring that your content and its use comply with all applicable copyright, trademark, publicity, and other laws, as well as the policies of any platform on which you publish.
8. Third-Party Platform Compliance
When you publish or distribute content through third-party platforms, including YouTube, TikTok, Instagram, and future supported platforms, you are responsible for complying with each platform's rules, terms, and community guidelines.
- Platforms may reject, remove, limit, demonetize, restrict, or otherwise act on content at their discretion.
- Platform decisions, penalties, and enforcement are made by those platforms and are outside Vero's control.
- Platform APIs and integrations may change, be limited, or be discontinued, which can affect publishing and analytics features.
Vero is not responsible for the decisions of third-party platforms, including demonetization, content removal, strikes, or the suspension or termination of your accounts on those platforms.
10. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.
When a project is deleted, its media files are removed from storage. Certain records may be retained where necessary for operational, security, legal, or technical reasons, and how long they are retained depends on those needs.
We take reasonable steps to delete or de-identify personal information that is no longer needed, subject to retention required by applicable law and to the routine backups maintained by our infrastructure providers. To request deletion of your account or personal information, contact us as described in the User Rights and Account Deletion sections.
11. User Rights
Subject to applicable law, you may exercise the following rights with respect to your information:
- Access the information we hold about you.
- Request a copy of applicable personal information.
- Correct inaccurate or incomplete information.
- Request deletion of your personal information and your account.
There is currently no self-service export or account-deletion feature. To make a request, contact us at factoreasec@gmail.com. These requests are handled manually; we may need to verify your identity first, and we fulfill applicable requests within a reasonable timeframe and as required by applicable law.
12. Account Deletion
You may request deletion of your account and personal information by contacting us at factoreasec@gmail.com. There is currently no self-service account-deletion feature; deletion requests are handled manually within a reasonable timeframe.
When we process a deletion request, we remove or de-identify your personal information and delete associated media files, except where we must retain certain records to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements. Some records may be retained where necessary, and residual copies may persist in routine backups for a limited period. Stored provider API keys are removed as part of this process.
13. Account Security and Abuse Prevention
To protect the Service and our users, we process account, usage, and device information to:
- Detect, prevent, and investigate fraud and abuse;
- Protect the security and integrity of accounts and the Service;
- Enforce our Terms of Service and this Policy; and
- Investigate suspected violations and respond to security incidents.
Where permitted by applicable law, we may suspend, restrict, or terminate access to protect the Service, our users, or third parties. These activities rely on our legitimate interest in operating a safe and reliable Service and on our compliance with legal obligations.
14. Security
We use reasonable administrative, technical, and organizational measures designed to protect information, including:
- Encryption of information in transit;
- Encryption of user-provided API keys at rest;
- Access controls that limit who can access personal information; and
- Safeguards intended to detect and prevent unauthorized access.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We do not claim any specific security certification. You are responsible for keeping your account credentials secure and for the security of any provider keys you supply.
15. International Data Transfers
We and our service providers may process and store information in countries other than the one in which you live. Where information is transferred across borders, we take steps intended to provide appropriate protection.
Personal information may be processed in Canada, the United States, and other countries where our service providers operate. When transferring personal information internationally, we rely on appropriate safeguards where required by law, including Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized transfer mechanisms.
16. GDPR
If you are located in the European Economic Area, the United Kingdom, or Switzerland, additional rights may apply under the General Data Protection Regulation and related laws, including rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority.
Data controller
The data controller for personal information processed through the Service is Vero, operated by Francis Beaudet Neron, located in Quebec, Canada. You can contact us at factoreasec@gmail.com. If required by applicable law, we will designate an EU or UK representative.
Legal bases for processing
- Performance of a contract (providing the Service and fulfilling your requests);
- Legitimate interests (securing the Service, preventing abuse, and maintaining and improving the Service);
- Consent, where required by applicable law; and
- Compliance with legal obligations.
Your rights
Where our processing is based on consent, you have the right to withdraw that consent at any time, without affecting processing carried out before withdrawal. You also have the right to data portability, to request restriction of or object to certain processing, and to lodge a complaint with your local data protection supervisory authority.
17. CCPA and CPRA
If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including rights to know, access, correct, and delete personal information, to opt out of the sale or sharing of personal information, and the right not to be discriminated against for exercising these rights.
Categories of personal information we collect
- Identifiers, such as email address and account identifiers;
- Account and profile information;
- Commercial information, such as subscription and purchase history;
- Internet or network activity, such as usage and analytics data;
- User content you provide or generate; and
- Connected-account and technical information needed to operate the Service.
Business purposes
We collect and use this information to provide the Service, process payments, secure accounts, prevent fraud and abuse, improve functionality, comply with legal obligations, and communicate with you.
Sale and sharing
We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law.
Your requests and non-discrimination
California residents may submit requests to know, access, correct, or delete their personal information by contacting us at factoreasec@gmail.com. We will verify your identity before acting on a request, and we will not discriminate against you for exercising your privacy rights.
18. Quebec Privacy (Law 25)
Vero is operated from Quebec, Canada. We are responsible for the personal information we hold and take reasonable measures to protect it, taking into account Quebec's Act respecting the protection of personal information in the private sector, as amended (commonly referred to as Law 25).
Person responsible for the protection of personal information
The person responsible for the protection of personal information is Francis Beaudet Neron, who can be reached at factoreasec@gmail.com.
If no specific privacy officer has been separately appointed, the person with the highest authority within the organization assumes this responsibility, unless another person is designated.
Consent
We collect, use, and disclose personal information only for the purposes identified in this Policy. Depending on the type of processing, your consent may be required. Where we rely on consent, you may withdraw it at any time, subject to legal or contractual limits and reasonable notice.
What we collect and why
For a full description of what personal information we collect, why we collect it, how we use it, who receives it, where it is stored, and how long it is retained, see the Information Collected, Third Parties, Data Storage, and Data Retention sections of this Policy.
Automated processing
Vero uses automated systems, including artificial intelligence, to assist in generating content and, where offered, recommendations, as described in the Automated Processing section. Where required by applicable law, you may request information about our use of automated processing that affects you by contacting us.
Privacy impact assessments
Where required by applicable law, Vero may conduct privacy impact assessments before implementing technologies or practices involving personal information.
Cross-border transfers
Personal information may be processed or stored outside Quebec or Canada, including in the United States, by our service providers. Before such transfers, we consider whether the information would receive appropriate protection, as described in the International Data Transfers section. You may contact us at factoreasec@gmail.com for more information about these transfers.
Your requests
You may submit requests to access, correct, or delete your personal information, to withdraw consent, or to ask questions about how it is handled, by contacting us at factoreasec@gmail.com. We will respond within the timeframes required by applicable law.
Privacy complaints
If you have a privacy concern, please contact us at factoreasec@gmail.com so we can address it. If you are not satisfied with our response, you may, where applicable, contact the Commission d'acces a l'information du Quebec (the CAI).
Language
This Policy is currently provided in English. Where required by Quebec consumer or privacy obligations, we will make a French-language version available, and where both versions exist the version required by applicable law will govern.
We do not represent that this Policy currently satisfies all French-language or other formal legal requirements. A French translation and legal review may be required before relying on this Policy in production.
19. Children's Privacy
The Service is not directed to children, and you must meet the minimum age described in our Terms of Service to use it. We do not knowingly collect personal information from children. If we learn that we have collected such information without appropriate consent, we will take steps to delete it. If you believe a child has provided us information, contact us at factoreasec@gmail.com.
20. Policy Updates
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this Policy and, where appropriate, provide additional notice through the Service or by other reasonable means.
Your continued use of the Service after an updated Policy takes effect constitutes acceptance of the revised Policy. If you do not agree with the changes, you should stop using the Service.
21. Privacy Contact
For privacy inquiries, data requests, or security concerns, contact us at:
- Vero
- Operated by: Francis Beaudet Neron
- Email: factoreasec@gmail.com
- Location: Quebec, Canada
We handle privacy inquiries, requests to access, correct, export, or delete personal information, and reports of security concerns through this contact.