Privacy & Policy Notice

1. Introduction

VEX ("we," "our," or "us") is committed to protecting your privacy and ensuring transparency in how we collect, use, and process your personal data. This Privacy & Policy Notice outlines our practices in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.

This policy applies to all users of our AI-powered image generation platform, including visitors to our website, users of our iOS app, and individuals whose data we process. By using our services, you acknowledge that you have read and understood this policy.

Important AI Disclosure: Our services utilize artificial intelligence and machine learning technologies to generate images. This policy specifically addresses how your data is used in AI processing and the rights you have regarding AI-generated outputs.

Company Name: VEX AI

Support Email: info@vexai.ai

Website: vexai.ai

Personal Data

We collect the following categories of personal data:

• Account Information: Email address and name provided during registration or obtained from your Apple or Google account when you use Sign in with Apple or Google Sign-In
• Payment Information: On iOS, payments are processed entirely by Apple via In-App Purchase — we receive a transaction ID and credit amount, not your card details. On the web, payments are processed by Stripe.
• Uploaded Content: Photographs and images you upload for AI image generation, and AI-generated images we store on your behalf
• Usage Data: Service usage patterns, feature interactions, session duration, and frequency of use
• Device Information: IP address, device identifiers, operating system, and app version
• Communication Data: Email communications, support tickets, and feedback you provide
• Referral Codes: If you use a referral code, we store it temporarily on your device and record the referral relationship in our system

Photo Library Access (iOS)

Our iOS app accesses your photo library only when you choose: you may select a photo as a reference for AI image generation (that image is uploaded and processed), and you may save generated images to your device. We do not browse or access other photos in your library.

Authentication Data

When you sign in using Sign in with Apple or Google Sign-In, we receive an identity token from Apple or Google to verify your identity. We do not receive or store your Apple or Google password. Apple may provide a private relay email address to protect your real email address.

How We Collect Data

We collect data through the following methods:

• Direct Collection: Information you provide when creating an account, uploading images, or communicating with us
• Third-Party Authentication: Basic profile information from Apple or Google when you sign in with those services
• Automated Collection: Data collected automatically through cookies and similar technologies on the web platform

We process your personal data for the following purposes, each with its specified lawful basis under GDPR:

AI Service Provider

Our services use the following third-party AI platform to generate images:

• Google Vertex AI (Gemini): Image generation is powered by Google's Gemini models accessed via Vertex AI. Images you submit as reference material are sent to Google's servers for processing.

Data Processing by Google

When you use our image generation features, your prompts and any uploaded reference images are transmitted to Google Vertex AI for processing. We have agreements with Google that govern how your data is handled:

• Your data is processed only for the specific purpose of generating images
• We do not authorise Google to use your data to train their models
• Data retention by Google is subject to their policies

We Do Not Train on Your Images

VEX AI does not use your uploaded photos or generated images to train AI models — either our own or those of third parties.

Provider Privacy Policy

• Google Cloud Privacy: cloud.google.com/security/privacy

AI Output Accuracy

AI-generated outputs are probabilistic and may not always meet your expectations. You should review outputs before use.

Sign in with Apple

When you sign in using Sign in with Apple, Apple authenticates your identity and passes an identity token to our servers. Apple may provide a private relay email address instead of your real email. We receive and store only the information Apple provides (name and email or relay address) to create and maintain your account.

In-App Purchases

All credit purchases made in the iOS app are processed entirely by Apple. We do not receive or store your payment card details. We receive from Apple only a transaction ID and the product purchased, which we use to credit your account.

Apple's privacy policy applies to payment data: apple.com/legal/privacy

Photo Library

The iOS app lets you pick a reference photo from your library when you attach one; that image is uploaded and processed for generation. You can also save generated images to your device. We do not access other photos without your explicit selection.

We Do Not Sell Your Data

We never sell your personal data to third parties for their marketing purposes.

Third-Party Service Providers

We share data with the following categories of service providers to operate our services:

• Cloud Infrastructure: Supabase (database, authentication, storage) and Vercel (web hosting)
• AI Processing: Google Vertex AI for image generation
• Payment Processing: Apple (iOS In-App Purchase) and Stripe (web)
• Authentication: Apple (Sign in with Apple) and Google (Google Sign-In)
• Email Communications: Resend for transactional and marketing emails

International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. We ensure adequate protection through Standard Contractual Clauses (SCCs) and other appropriate safeguards.

Under GDPR, CCPA, and other data protection laws, you have the following rights:

How to Exercise Your Rights

• Delete your account directly in the app: Profile → Delete account
• Email us at info@vexai.ai for other requests

We will respond to your request within 30 days.

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data is encrypted using TLS
• Encryption at Rest: Data stored in Supabase is encrypted at rest
• Row-Level Security: Database policies ensure users can only access their own data
• Signed Storage URLs: Images are stored privately and accessed only via time-limited signed URLs
• Authentication: Managed by Supabase Auth with support for Sign in with Apple and Google Sign-In

While we take all reasonable measures to protect your data, no method of transmission over the internet is 100% secure.

Our website uses cookies for the following purposes:

• Essential Cookies: Required for authentication and basic site functionality
• Analytics Cookies: Aggregated, non-personal usage data to improve the product

The VEX iOS app does not use cookies.

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal data, please contact us at info@vexai.ai and we will delete it.

We may update this privacy policy from time to time. Material changes will be communicated by email to registered users and by a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

Your data may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards for international transfers:

• EU to US Transfers: We use Standard Contractual Clauses (SCCs) approved by the European Commission
• Other Transfers: We use appropriate safeguards as required by applicable law