PRIVACY POLICY

Last Updated: January 13th, 2026

⚠️ IMPORTANT: SENSITIVE DATA WARNING

DO NOT upload, submit, or provide any sensitive personal information through our Service, including but not limited to: Social Security numbers, government-issued identification numbers, financial account numbers, health or medical information, religious or philosophical beliefs, sexual orientation, racial or ethnic origin, political opinions, trade union membership, genetic data, or precise geolocation data.

VOICE CLONING NOTICE: If you use our voice cloning feature, you acknowledge that voice recordings may be considered biometric data under certain laws. By uploading voice samples, you represent and warrant that you have obtained all necessary consents from the voice owner and that you have the legal right to use such voice data. VUBO is not responsible for any unauthorized use of voice data.

1. INTRODUCTION

VUBO Inc. ("VUBO," "we," "us," or "our") is committed to protecting your privacy and maintaining the highest standards of data security. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video generation platform (the "Service"), accessible at https://vubo.ai.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. This Privacy Policy is incorporated into and forms part of our Terms of Service.

2. INFORMATION WE COLLECT

2.1 Personal Information

We may collect the following categories of personal information:

  • Account Information: When you register for an account, we collect your email address, name, and profile image URL.
  • Authentication Data: If you authenticate using Google or other third-party providers, we receive information such as your email address, user ID, and email verification status.
  • Payment Information: When you subscribe to our Service or purchase credits, we collect payment information necessary to process your transactions. Payment processing is handled by our payment processor, Polar, and we do not store complete payment card information on our servers.
  • Communications: If you contact us directly, we may collect information you provide in your communications to us.

2.2 User Content

We collect and store the videos, images, audio, text, and other content you upload, generate, or share through the Service ("User Content"). This may include:

  • Content you upload to create videos
  • Generated videos and related outputs
  • Video templates you create or modify
  • Prompts and parameters you enter
  • Voice recordings for voice cloning features

User Content Responsibility: You are solely responsible for all User Content you upload, create, or share through the Service. You represent and warrant that you have all necessary rights, licenses, and permissions to use and authorize VUBO to use such content. VUBO disclaims all liability for User Content that infringes third-party rights.

2.3 Technical Information

We automatically collect certain information when you use the Service, including:

  • Device Information: Information about the device you use to access the Service, including hardware model, operating system, unique device identifiers, and mobile network information.
  • Log Data: Internet protocol (IP) address, browser type, browser version, pages visited, time and date of your visit, time spent on those pages, and other diagnostic data.
  • Usage Information: Information about how you use the Service, including features accessed, videos created, and interactions with the platform.

2.4 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on our Service. These technologies help us provide essential site functionality, remember your preferences, and understand how you interact with our Service. We may use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until you delete them or they expire).

2.4.1 Types of Tracking Technologies We Use

Our Service employs industry-standard analytics and tracking technologies, which may include:

  • Facebook Pixel
  • Snapchat Pixel
  • TikTok Pixel
  • Google Ads Pixel
  • Google Analytics
  • PostHog
  • Other similar analytics and marketing technologies

2.4.2 Consent-Based Implementation

We respect your privacy preferences and regional privacy regulations:

  • In regions where explicit consent is required by law, we activate tracking technologies only after you have provided explicit consent through our cookie consent interface
  • In regions where implied consent is permitted, tracking technologies may be active upon your use of our Service
  • Regional determination is made through secure geolocation technology based on your IP address

By using our Service, you consent to the placement of cookies and similar technologies on your device in accordance with applicable laws in your region. Most browsers allow you to control cookies through their settings. If you choose to disable cookies, some features of our Service may not function properly.

3. HOW WE USE YOUR INFORMATION

3.1 Service Provision and Improvement

We use your information to:

  • Provide, maintain, and improve the Service
  • Process transactions and manage your account
  • Respond to your inquiries and provide customer support
  • Send you technical notices, updates, security alerts, and administrative messages
  • Monitor and analyze trends, usage, and activities in connection with the Service
  • Detect, prevent, and address technical issues

3.2 AI Features and Model Training

We may use your User Content to:

  • Generate videos and other outputs based on your inputs
  • Develop new features and capabilities for the Service
  • Improve the quality and accuracy of our video generation technology

AI Training Disclosure: We may use anonymized and aggregated data derived from User Content to train, improve, and develop our AI models and service offerings. This data is stripped of personally identifiable information before being used for training purposes. If you wish to opt out of having your anonymized data used for AI training, please contact us at privacy@vubo.ai with the subject line "AI Training Opt-Out."

3.3 Third-Party API Processing

To provide the Service, we transmit your User Content to third-party API providers (such as AWS services, ElevenLabs for voice synthesis, and others) who process this data in accordance with their own terms and privacy policies. These transmissions are necessary for the functioning of our Service and to deliver the high-quality video generation capabilities that we offer.

4. SHARING YOUR INFORMATION

4.1 Service Providers

We may share your information with trusted third-party vendors and service providers who perform services for us or on our behalf, including:

  • Polar for payment processing
  • PostHog and Google Analytics for analytics services
  • AWS services (S3, Rekognition, Lambda) for infrastructure and content processing
  • ElevenLabs for voice synthesis and cloning
  • Authentication providers (e.g., Google)

These service providers are permitted to use your information only for the purpose of providing services to us and are contractually required to maintain the confidentiality of your information.

4.2 Social Media Platform Integrations

If you choose to integrate with social media platforms (YouTube, TikTok, Facebook, Instagram, etc.), we will share necessary information with these platforms to facilitate publishing, such as authentication tokens and content you choose to publish, in accordance with each platform's terms and privacy policies.

4.3 Advertising Partners

We may share certain information with advertising partners to measure the effectiveness of our advertising campaigns, deliver targeted advertisements, and perform analytics. This may include hashed identifiers, device information, and conversion data. You can opt out of personalized advertising through your device settings or by contacting us.

4.4 Affiliates

We may share your information with our corporate affiliates, subsidiaries, and parent companies for purposes consistent with this Privacy Policy. All affiliates are required to honor this Privacy Policy.

4.5 Business Transfers

If VUBO Inc. is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.6 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to meet national security or law enforcement requirements.

4.7 Protection of Rights

We may disclose your information to:

  • Enforce our Terms of Service
  • Protect and defend the rights or property of VUBO Inc.
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of users of the Service or the public

4.8 With Your Consent

We may share your information with third parties when we have your consent to do so.

5. DATA SECURITY

We implement industry-leading technical and organizational measures to protect the security of your personal information. Our secure infrastructure includes:

  • Enterprise-grade encryption protocols for data in transit (TLS 1.2+) and at rest (AES-256)
  • Secure server infrastructure using AWS's robust security framework
  • Regular security assessments and penetration testing
  • Strict access controls and authentication mechanisms
  • Comprehensive security monitoring and incident response procedures
  • Employee security training and confidentiality agreements

Our primary database and infrastructure are hosted in secure AWS facilities located in North Virginia, USA (us-east-1), which maintain rigorous physical and environmental security controls and are SOC 2, ISO 27001, and PCI DSS compliant.

However, please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

6. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws different from those in your country.

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our primary servers are located. When we transfer your information internationally, we take measures to ensure that it receives an adequate level of protection as required by applicable law, which may include:

  • Using EU Standard Contractual Clauses (SCCs) approved by the European Commission
  • Ensuring recipient countries have been deemed to provide adequate protection
  • Implementing appropriate supplementary measures when necessary
  • Relying on service providers' certifications under approved frameworks

You may request a copy of the safeguards we use for international transfers by contacting us at privacy@vubo.ai.

7. DATA RETENTION

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention periods are as follows:

Data TypeRetention Period
Account InformationDuration of account + 30 days after deletion request
Generated Videos & MediaPer subscription plan (typically 30-90 days on active servers)
Voice Cloning DataUntil you delete the cloned voice or account cancellation
Payment Records7 years (tax and legal compliance)
Server Logs90 days
Analytics Data26 months (aggregated/anonymized indefinitely)
Support Communications3 years

Account Cancellation: Upon account cancellation, we will delete or anonymize your personal data within 90 days, except for data we are required to retain for legal, tax, or regulatory purposes.

When we no longer need to use your information, we will take reasonable steps to remove it from our systems and records or to de-identify it so that it can no longer be associated with you.

8. YOUR PRIVACY RIGHTS

Depending on your location and applicable laws, you may have certain rights regarding your personal information. We respect your privacy rights and provide mechanisms for you to exercise them.

8.1 Access and Correction

You may request access to the personal information we hold about you and request that we correct any inaccurate information.

8.2 Deletion

You may request that we delete your personal information in certain circumstances. Please note that we may need to retain certain information for recordkeeping purposes, to complete transactions, or to comply with our legal obligations.

8.3 Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

8.4 Restriction of Processing

You may request that we restrict the processing of your personal information in certain circumstances.

8.5 Withdrawal of Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.6 Marketing Communications

You can opt out of receiving marketing communications from us by following the unsubscribe instructions included in our marketing communications or by contacting us directly.

8.7 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@vubo.ai. We will respond to your request within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.

9. INFORMATION FOR EUROPEAN USERS (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, this section applies to you in addition to the rest of this Privacy Policy.

9.1 Data Controller

VUBO Inc. is the data controller responsible for your personal data. Our contact information is provided at the end of this Privacy Policy.

9.2 Legal Bases for Processing

We process your personal data only when we have a valid legal basis to do so:

  • Contract Performance: Processing necessary to provide you with the Service (account creation, video generation, payment processing)
  • Legitimate Interests: Processing for our legitimate business interests (security, fraud prevention, service improvement, analytics), where not overridden by your rights
  • Consent: Processing based on your explicit consent (marketing communications, AI training opt-in, cookies)
  • Legal Obligation: Processing necessary to comply with legal requirements (tax records, law enforcement requests)

9.3 Your GDPR Rights

Under the GDPR, you have the following rights:

  • Right of Access: Obtain confirmation of whether we process your data and receive a copy
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we process your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Right to Lodge a Complaint: File a complaint with your local supervisory authority

9.4 Automated Decision-Making

We may use automated systems to detect fraud, enforce our terms, and moderate content. These systems may make decisions that affect your access to the Service. You have the right to request human review of any automated decision that significantly affects you.

9.5 EU Representative

As required under Article 27 of the GDPR, if you are in the EU/EEA and have questions about our privacy practices, you may contact our EU representative at: eu-representative@vubo.ai

10. INFORMATION FOR CALIFORNIA RESIDENTS (CCPA/CPRA)

If you are a California resident, this section applies to you under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

10.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

  • Identifiers: Name, email address, account name, IP address, unique device identifiers
  • Commercial Information: Purchase history, subscription details, credits purchased
  • Internet Activity: Browsing history on our Service, interactions with our platform
  • Geolocation Data: General location based on IP address
  • Audio/Visual Information: Voice recordings (for voice cloning), uploaded media
  • Inferences: Preferences and characteristics derived from your use of the Service

10.2 Sources of Personal Information

We collect personal information from:

  • Directly from you when you use our Service
  • Automatically through your use of the Service
  • Third-party authentication providers (e.g., Google)
  • Payment processors

10.3 Sale and Sharing of Personal Information

We do not "sell" personal information as traditionally defined. However, under the CCPA/CPRA's broad definitions, our use of advertising cookies and pixels may constitute "sharing" of personal information for cross-context behavioral advertising. You may opt out of this sharing by:

  • Adjusting your cookie preferences through our consent banner
  • Enabling Global Privacy Control (GPC) in your browser
  • Contacting us at privacy@vubo.ai

10.4 Your California Privacy Rights

As a California resident, you have the following rights:

  • Right to Know: Request disclosure of personal information collected, used, and disclosed
  • Right to Delete: Request deletion of your personal information
  • Right to Correct: Request correction of inaccurate personal information
  • Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information
  • Right to Limit Use of Sensitive Personal Information: Limit use of sensitive personal information to what is necessary
  • Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

10.5 Do Not Track Disclosure

Our Service does not currently respond to "Do Not Track" (DNT) browser signals. However, we do honor Global Privacy Control (GPC) signals as a valid opt-out request for the "sharing" of personal information.

10.6 Authorized Agents

You may designate an authorized agent to make requests on your behalf. We will require verification of both your identity and the agent's authority to act on your behalf.

10.7 Financial Incentives

We do not offer financial incentives in exchange for the collection, sale, or deletion of personal information.

11. CHILDREN'S PRIVACY

The Service is not intended for individuals under the age of 18. We do not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take necessary actions to delete such information.

12. CHANGES TO THIS PRIVACY POLICY

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes that significantly affect your rights or how we use your personal information, we will provide at least 30 days' advance notice via email or a prominent notice on our website.

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. CONTACT US

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us at:

VUBO Inc.

Privacy Inquiries: privacy@vubo.ai

Legal Matters: legal@vubo.ai

EU Representative: eu-representative@vubo.ai

Website: https://vubo.ai/contact

We will respond to all privacy-related inquiries within 30 days or as required by applicable law.