Privacy Policy
Plain language, no tracking. What we store when you use Vyndexo, where it lives, how long we keep it and how to get it removed.
Who we are
Vyndexo is an AI workspace for chat, image and video generation, research and automated agents, operated from Belgium. This policy explains what personal data we process when you use vyndexo.com and the workspace, and why. Questions and requests go to support@vyndexo.com.
What we collect
Account data: your e-mail address and login details. Authentication is handled by Supabase; we never see your password in clear text.
Content you create: prompts, uploaded files, generated images, videos and text, projects, spaces and settings. This is your data; we store it so you can come back to it.
Billing data: payments are processed by Stripe. We receive the plan or credit pack you bought, the amount and a payment reference. Card numbers never touch our servers.
Technical data: IP address, browser type and request logs, used for security, abuse prevention and keeping the service running.
How we use it
To provide the workspace: run your requests, store your results, keep your credits balance correct.
To bill you and to handle refunds or disputes.
To keep the service safe: rate limiting, abuse detection, fraud prevention.
To answer support requests.
We do not sell personal data, we do not show advertising, and we do not profile you for marketing.
AI model providers
When you run a prompt, the text and any files you attach are sent to the third-party provider of the model you selected (currently: Alibaba, Anthropic, Black Forest Labs, ByteDance, DeepSeek, Google, Groq, HappyHorse, Ideogram, Kuaishou (Kling), Luma, MiniMax, Mistral, Moonshot, OpenAI, Vidu, Zhipu, xAI) under that provider's API terms. The providers we use do not train their models on API traffic. Which provider powers a model is shown in the model catalogue. We only send what is needed to run that single request.
Where your data is stored
Our application servers run in Germany. Account data, content and media are stored with Supabase on Amazon Web Services infrastructure in Ireland (eu-west-1, EU). Model requests are processed by the respective model providers. Payments are processed by Stripe, which may transfer data outside the EU under its own safeguards (Standard Contractual Clauses).
How long we keep it
Your content stays available for as long as your account exists, or until you delete it yourself. One exception: images and videos shared in a Space's team chat are removed from the server after 24 hours unless a member adds them to the Canvas; text messages in team chat are kept.
When you delete content or close your account, it is removed from the live service immediately and from backups within 7 months. After that it is gone for good.
Server logs are kept for 14 days for security purposes and then deleted automatically.
Billing records are kept as long as tax and accounting law requires.
Cookies
We only use strictly necessary cookies: the session cookie that keeps you logged in and security tokens that protect your account. There are no analytics, advertising or tracking cookies, so there is nothing to consent to and no cookie banner.
Who else sees your data
Processors acting on our instructions: Supabase (database and authentication), Amazon Web Services (storage, EU region), Stripe (payments), and the AI model providers listed in the catalogue for the specific requests you run.
Authorities, only where the law obliges us to.
Nobody else. We do not share, rent or sell your data.
Your rights
You can access, correct, export or delete your data. Most of this you can do yourself inside the workspace; for anything else, e-mail support@vyndexo.com and we respond within 30 days.
You can object to processing or ask us to restrict it, and you can withdraw consent at any time where processing is based on consent.
If you are unhappy with how we handle your data, you can complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) or the authority in your own EU country.
Legal basis
We process your data to perform our contract with you (providing the workspace and billing), to meet legal obligations (tax, accounting), and for our legitimate interest in keeping the service secure and free of abuse.
Age
Vyndexo is intended for people aged 16 and over. If you are under 16 you may only use the service with the consent of a parent or guardian, and never where the law of your country sets a higher minimum age for online services. Models and settings that can produce adult content are off by default and can only be switched on by users who are 18 or older, as set out in our Terms of service.
Changes to this policy
We update this page when our processing changes. The date below always shows the current version. Last updated: 21 October 2026.
