1. Who we are

VEHM is operated by Digital Communique, based in Auckland, New Zealand. In this policy, “VEHM”, “we”, “us”, and “our” refer to Digital Communique. “Service” means the VEHM website, account area, video-generation tools, billing features, and related services available through vehm.studio.

Digital Communique is responsible for the personal information described in this policy. You can contact us at support@vehm.studio.

2. Information we collect

Account and authentication information

Your email address and internal account identifier.
A securely hashed version of your password when you use email-and-password login. We do not store your plain-text password.
If Google sign-in is enabled and you choose it, information Google makes available for authentication, such as your email address. VEHM currently uses the email address to create or associate your account.
Session, password-reset, and account-security information.

Projects and content

Ideas, topics, titles, scripts, narration text, visual instructions, selected styles, languages, voices, aspect ratios, durations, and other project settings.
Generated scene descriptions, compositions, thumbnails, images, and related project metadata.
Logos or other assets you choose to upload to a project.
The final MP4 may be assembled in your browser. When that happens, we do not retain a separate copy of the completed export merely because you download it, although its underlying project materials may remain in your account.

Billing, credits, promotions, and referrals

Your credit balance, credit activity, purchases, subscription type and status, billing interval, and auto-top-up preference.
Stripe customer, subscription, and checkout identifiers. Stripe processes your card and other payment details; VEHM does not store full payment-card numbers.
Promotion-code use, referral codes, invited-account relationships, and referral rewards.

Contact and support information

When you contact us, we collect the name, email address, message, and any information you choose to include. We may also process your IP address and browser information temporarily for rate limiting, fraud prevention, and Cloudflare Turnstile verification.

Usage and technical information

We and our service providers may collect IP address, approximate location derived from IP, browser and device type, operating system, referring page, pages viewed, timestamps, session information, interactions, errors, and diagnostic data. PostHog analytics may assign a pseudonymous identifier to a browser so visits can be understood over time.

3. How we use information

We use personal information to:

Create, authenticate, secure, and administer accounts.
Generate scripts, images, speech, whiteboard videos, and motion clips you request.
Save projects, provide downloads, maintain credit balances, and operate referrals and promotions.
Process purchases, subscriptions, billing changes, and payment-related support.
Send password-reset, security, transactional, and support emails.
Respond to questions and investigate bugs, abuse, fraud, or service incidents.
Measure and improve performance, usability, reliability, and product features.
Comply with legal obligations and establish, exercise, or defend legal claims.

Depending on the context and applicable law, we rely on performance of our contract with you, our legitimate interests in operating and improving VEHM, your consent, and compliance with legal obligations.

4. AI processing

VEHM uses third-party artificial-intelligence services, including OpenAI and Google Gemini, to provide scriptwriting, text-to-speech, image generation, and motion-video generation. To fulfil your request, relevant prompts, scripts, scene descriptions, visual instructions, selected settings, and input images may be sent to those providers.

Do not submit sensitive personal information, confidential information you are not authorised to share, or content that violates another person’s rights. AI providers process submitted material under their own terms and privacy practices. Generated output may be inaccurate, unexpected, or similar to output provided to others.

5. How we share information

We disclose information only as reasonably necessary to operate VEHM, complete transactions, protect the Service, or meet legal requirements. Our main categories of service providers include:

Hosting and infrastructure: Vercel and database/infrastructure providers such as Neon.
Payments: Stripe, which processes checkout, subscriptions, and customer billing portals.
AI generation: OpenAI and Google for text, speech, image, and video services.
Email: Resend for support and account-related email delivery.
Security: Cloudflare Turnstile for bot and abuse prevention.
Analytics: PostHog for understanding how the Service is used.
Client-side export delivery: jsDelivr may deliver the FFmpeg software module used by your browser to assemble some MP4 exports. The media is processed in your browser; the CDN receives ordinary network-request information but does not receive the export from VEHM for storage.

We may also disclose information to professional advisers, regulators, courts, law-enforcement bodies, or another organisation involved in a proposed merger, financing, reorganisation, or sale of all or part of our business, where permitted by law. We may disclose information when you direct us to or consent.

6. Cookies, local storage, and analytics

VEHM uses cookies and similar browser storage for sign-in sessions, security, referrals, service preferences, and analytics. Some are essential for requested features; others help us understand and improve the Service. Stripe and Cloudflare may also use their own technologies when you use checkout, billing, or bot-verification features.

See our Cookie Policy for details and available controls.

7. International transfers

Digital Communique is based in New Zealand, while our service providers may process information in the United States, Europe, Australia, New Zealand, or other countries. Those countries may have privacy laws different from those where you live. We use providers’ contractual and organisational safeguards and take reasonable steps required by applicable law when information is transferred internationally.

8. How long we keep information

We retain information only for as long as reasonably needed for the purposes described in this policy, including to provide your account, maintain transaction records, resolve disputes, prevent fraud, and comply with tax, accounting, and other legal obligations.

Account and project data generally remains while your account or project is active.
Deleted projects are removed from the active database, subject to limited backup retention.
Password-reset links are designed to expire after one hour.
The VEHM referral cookie expires after seven days.
Billing records may be retained longer where required for legal, accounting, or fraud-prevention purposes.
Support messages and analytics data are retained according to operational needs and provider settings.

You may request account or personal-information deletion by contacting us. We may retain limited information where required by law or necessary to establish, exercise, or defend legal claims.

9. Security

We use reasonable technical and organisational measures designed to protect personal information, including encrypted HTTPS connections, hashed passwords, restricted administrative access, signed session tokens, provider access controls, and abuse-prevention measures. No online service can guarantee absolute security. You are responsible for choosing a strong password and keeping your login details confidential.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent where processing is based on consent. New Zealand users have rights under the Privacy Act 2020, including rights to request access to and correction of personal information.

To make a request, email support@vehm.studio from the address associated with your account. We may need to verify your identity. We will respond within the period required by applicable law. If you are in New Zealand and believe we have not resolved a privacy concern, you may contact the Office of the Privacy Commissioner.

11. Children’s privacy

VEHM is intended for people aged 18 or older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us so we can investigate and take appropriate action.

12. Changes to this policy

We may update this Privacy Policy when VEHM, our providers, or legal requirements change. We will post the revised version here and update the “Last updated” date. Where a change is material, we may also provide notice through the Service or by email.

13. Contact us

For privacy questions or requests, contact:

Digital Communique
Auckland, New Zealand
Email: support@vehm.studio