Privacy and Data Protection Policy

• Account information: name, email address, and account identifier.
• The product images you upload for generation.
• The generated images produced by AI processing.
• Anonymised technical data used for performance and service improvement.

Your product images are uploaded directly to secure storage on Supabase Storage through short-lived signed URLs. The image is passed to the generation model to produce the advertising version, then returned to you through a link tied to your account only. Images are not stored with any public identifying data, and no other user can access them.

• All communication with the platform goes over HTTPS/TLS 1.3.
• Data in the database is protected by strict row-level RLS policies.
• Sensitive access keys (API keys) are never exposed on the front end.
• External webhooks are signed with HMAC-SHA256 using a timing-safe comparison.

We do not sell, rent, or share your personal information or your product images with any third party for marketing or analytics purposes.

We rely on technical service providers strictly necessary to operate the platform:

• Supabase Inc. (United States) — database, authentication, and image storage.
• Google LLC — Gemini models for image processing and generation (processing on United States servers).
• fal.ai / Features and Labels Inc. (United States) — running image generation and enhancement models.
• PayPal (Europe) S.à r.l. — payment and subscription processing.

This means your images may be processed outside your country of residence, including in the United States, solely for the purpose of fulfilling your request, and under the contractual data protection terms agreed with each provider.

None of your content is used to train AI models, and all of these providers are contractually bound to protect the data.

• Access your data at any time from the dashboard.
• Edit your account information directly.
• Delete your account and all images associated with it from the “Delete account” button. Images and personal data are deleted, while invoice and payment records alone are retained for the period required by accounting law.
• Request a full copy of your data by email at contact@vilabs360.com within 7 business days.

We use only cookies that are necessary to run the session and remember language and dark mode preferences. We do not use third-party advertising trackers.

Your uploaded images and generated images are kept for as long as your account is active, and you can delete any of them at any time from the library. When the account is deleted, images are removed from operational storage within 7 days, and from backups within 30 days at most. Invoice and payment records are kept for 10 years in accordance with accounting and legal obligations, and contain no images.

For any privacy question or data deletion request, write to us at contact@vilabs360.com. We reply within 24 hours.