Privacy Policy

This Privacy Policy is established by Shenzhen Yueqian Weidu Technology Co., Ltd. (Registered Address: Shenzhen, Guangdong Province, China). We are the Data Controller of your personal data and are responsible for the processing and protection of your personal data.

This Policy applies when you access, register for, or use the VSpace official website, web application, AI creation features, account and billing features, asset library, public gallery, and related service interfaces.

We process personal information in a lawful, fair, necessary, and transparent manner, and we aim to collect only the information required to provide and improve our services. If you do not agree with any part of this Privacy Policy, please stop using VSpace.

If you have any questions about this Privacy Policy or how we process personal information, you may contact us at support@vspace.ai.

Information We Collect

To provide VSpace services, we may collect the following types of information:

Account and identity information: email address, username or nickname, profile picture, bio, login method, email verification status, Google authorization details, two‑factor authentication status, sessions, and login credentials. Security information such as passwords and verification codes is protected in accordance with authentication service requirements.
Creation and asset information: prompts, text instructions, uploaded or imported images, videos, audio, documents, reference materials, generation parameters, selected models, task status, session records, generated results, asset names, likes, deletion records, downloads, publishing actions, and related operation records.
Public work information: when you voluntarily publish or submit works for public display, we may process the title, description, tags, cover image, media content, author display information, public status, review status, sharing data, and interaction data.
Billing and entitlement information: plan type, subscription period, credit balance, credit transaction records, payment status, Stripe Customer ID, Subscription ID, Checkout Session ID, Invoice ID, billing links, and invoice information. Sensitive payment information such as card numbers, full payment credentials, and CVV codes is processed by third‑party payment providers such as Stripe. We do not intentionally store complete card information.
Device, log, and usage information: IP address, browser type, device type, operating system, language, time zone, access time, request logs, error logs, performance logs, page paths, feature usage events, risk control logs, and security logs.
Cookies and local preference information: login sessions, security verification, language, theme, basic preferences, and necessary analytics identifiers.
Customer support and feedback information: questions, contact details, communication records, attachments, and handling status submitted through email, customer support, or feedback channels.

We do not intentionally ask you to provide sensitive information unrelated to the current services, such as government ID documents, precise location, contact lists, health information, or financial account passwords. If you include another person’s personal information, likeness, voice, private information, or other sensitive content in uploaded materials or prompts, you are responsible for ensuring that you have obtained proper authorization.

How We Use Information

We use the information we collect for the following purposes:

To create and manage accounts, complete login, verification, permission checks, and account security protection;
To provide AI creation services, including image generation, video generation, Agent features, prompt processing, asset management, result downloads, and public works;
To record generation tasks, model parameters, asset references, credit usage, and failed‑task refunds, and to prevent duplicate submissions, duplicate credit deductions, or entitlement errors;
To provide subscription plans, billing inquiries, Stripe‑hosted payments, customer portals, invoices, and credit entitlement management;
To provide notifications, customer support, feedback handling, troubleshooting, and after‑sales support;
To conduct security risk control, anti‑abuse monitoring, content safety review, enforcement actions, and platform stability monitoring;
To perform data statistics, performance analysis, product optimization, and service improvement within the necessary scope;
To comply with applicable laws, regulatory requirements, dispute resolution, audits, and compliance obligations.

Lawful Basis for Processing (GDPR Applicable) For personal data processing of users in the EU/EEA, we conduct processing activities based on the following lawful bases: performance of a contract, processing necessary for account creation, provision of AI creation services, subscription and payment handling, and response to customer service requests; legitimate interests, necessary processing for platform security and risk control, anti‑abuse, product optimization, feature improvement, and data analysis; legal obligation, processing necessary to comply with applicable laws, regulatory requirements, and judicial or administrative orders; consent, processing activities such as non‑necessary cookies, marketing notifications and other activities requiring your consent are carried out based on your explicit consent, which you may withdraw at any time.

Cookies and Similar Technologies

We use cookies and similar technologies to maintain login status, verify session security, save language and theme preferences, improve service stability, and, in production environments, potentially load analytics tools through Google Tag Manager to understand page visits and product usage.

We classify cookies into two categories: Necessary Cookies, cookies essential for normal platform operation, login authentication, security verification and functional interaction. Such cookies do not require your additional consent. Disabling them may affect login, theme settings, language settings, payment redirects, or certain platform features. Non‑necessary Analytics Cookies, cookies used for statistical analysis, product optimization and user behavior research. Such cookies are only enabled with your consent. You may refuse or clear them at any time through browser settings or platform preference management.

You may refuse or delete cookies through your browser settings. Disabling necessary cookies may affect login, theme settings, language settings, payment redirects, or certain platform features.

AI Creation Data and Third‑Party Service Providers

VSpace’s image, video, text, Agent, and asset processing capabilities may be provided through a combination of our own services and third‑party AI models, rendering services, transcoding services, storage services, or gateway providers.

To complete creation tasks that you initiate, we may transmit necessary data to relevant service providers, including prompts, reference images, video materials, audio materials, model parameters, task identifiers, and technical logs. We will try to avoid sending account identity information, payment information, or other unnecessary personal identifiers to AI model providers when they are not required for the creation task.

We will not use your prompts, uploaded materials or non‑public generated content to train our own or third‑party AI models, unless you give separate explicit written authorization.

Third‑party service providers may include AI model providers, cloud storage and CDN providers, payment provider Stripe, Google login services, email service providers, verification and security services, analytics services, and customer support tools. The specific providers may change depending on models, features, regions, and operational configuration. We supervise and audit the data processing activities of entrusted service providers, requiring them to process information only for agreed purposes and within the necessary scope, and to adopt reasonable security measures.

Different models and features may rely on different third‑party service providers. If you do not want certain creation materials to be processed by a particular upstream provider, please stop using the corresponding model or feature.

User Content, Uploaded Content, and Generated Results

Content that you input, upload, or import remains owned by you or the relevant rights holder. You are responsible for ensuring that you have the lawful rights or permissions to use prompts, materials, likenesses, voices, videos, fonts, logos, trademarks, works, and other content.

Your right to use generated results is subject to your subscription plan or entitlements, the terms of the selected model provider, third‑party material licenses, public publishing status, and applicable legal restrictions. This Privacy Policy does not grant us unlimited commercial rights to your non‑public content.

To provide the services, preserve history, reuse assets, display generated results, conduct safety reviews, resolve disputes, and maintain system stability, we may store and process your User Content within the necessary scope. We do not promise that all uploaded materials will be automatically deleted immediately after a task is completed. Materials, generated results, and session records will be handled according to your save, delete, publish, and account status choices, as well as applicable retention requirements.

Likeness, Face, and Biometric Information

Faces, likenesses, and voices constitute sensitive personal data. We only process such data to the extent necessary for the provision of the creation service.

VSpace does not currently intentionally extract faces, likenesses, or voices that you upload into biometric templates, nor do we use them for identity recognition or commercial profiling.

If you upload materials containing faces, likenesses, voices, or other identifiable personal features, we will process them as creation materials voluntarily submitted by you. Such processing may be used for generation, editing, previewing, saving, downloading, publishing, safety review, dispute handling, and other service‑related purposes.

Please do not upload or use another person’s likeness, voice, image, private information, or materials involving minors without proper authorization.

We do not sell your personal information. We share or disclose information only where necessary, including in the following situations:

To AI model, rendering, transcoding, storage, CDN, and similar service providers, using the minimum information necessary to complete creation tasks;
To payment service providers such as Stripe, for payment, subscription, billing, and invoice processing;
To login service providers such as Google, to complete authorized login or account linking;
To email, customer support, verification, security, and analytics service providers, as necessary to perform services;
When you voluntarily make works public, share them, publish them, or authorize third‑party access, in accordance with your actions;
To comply with laws, regulations, regulatory requirements, judicial or administrative requests, or to protect the lawful rights and interests of the platform, users, and third parties.

Public Content and Search Visibility

When you voluntarily publish a work as public or shareable, the work content, title, description, cover image, media, author display information, and certain generation‑related information may be viewed, liked, shared, used for “create similar” features, or indexed by search engines.

You may withdraw, delete, or adjust the public status of works through platform features. However, content that has already been saved, reposted, cached, or indexed by third parties or search engines may not be fully controlled or immediately removed by us.

Retention and Deletion

We retain your information only for as long as necessary to fulfill the purposes described in this Privacy Policy:

Account information is generally retained while your account remains active;
Materials, sessions, and generated results are generally retained until you delete them, close your account, or they become subject to platform cleanup rules;
Payment, billing, subscription, credit, and audit records are retained as required for finance, tax, dispute resolution, and compliance purposes;
Security logs, error logs, and risk control records are retained for the period necessary to maintain security, troubleshoot issues, and resolve disputes;
Data in backup systems will be gradually overwritten or deleted during backup update cycles, with backup copies retained for a maximum period of 30 days;
Information required by law, or necessary for dispute resolution, enforcement of agreements, or protection of lawful rights and interests, may continue to be retained for the necessary period after a deletion request.

Protection of Minors

VSpace is intended only for users who are at least 18 years old. If you are under 18, please do not register for or use the platform, submit personal information, upload materials, or initiate generation tasks. If we discover that a minor has registered and used the service, we will immediately terminate the account and delete the relevant personal information.

Information Security

We take reasonable technical and organizational measures to protect your information, including access controls, permission isolation, transmission encryption, storage protection, log audits, risk monitoring, and security incident response mechanisms.

In the event of a personal data breach, alteration or loss, we will immediately activate an emergency response plan, take remedial measures, and promptly report to the supervisory authority in accordance with applicable laws and regulatory requirements, and notify affected users through reasonable means such as email or in‑platform notices.

However, internet transmission, system operation, and third‑party services cannot be guaranteed to be absolutely secure. You should also safeguard your account, password, verification codes, two‑factor authentication information, and login devices, and avoid lending your account to others.

Cross‑Border Processing

VSpace provides AI creation services to users worldwide. Due to the geographic distribution of service providers, your information may be transferred to, stored in, or processed outside your region.

Data that may be transferred cross‑border includes account identity data, creation assets, billing entitlements, device logs, and customer feedback, for purposes including AI generation, cloud storage, payment handling, troubleshooting, and product improvement. The main overseas recipients include AI model providers, cloud storage and CDN providers, payment provider Stripe, third‑party login providers, email and security verification providers, and data analytics providers.

We apply data‑minimisation principles for cross‑border transfers and enter into Data Processing Agreements (DPA) with overseas processors. For transfers relevant to the EU, we rely on the European Commission Standard Contractual Clauses (SCC) as compliance safeguards, and implement technical safeguards such as encryption in transit. If you are located in Mainland China, using the service means that some of your personal information will be transferred to and processed on overseas servers. We will lawfully fulfill personal information cross‑border compliance procedures and obtain your separate consent through the product interaction interface. You may contact us via support@vspace.ai for further information regarding cross‑border data transfers.

Updates to This Policy

We may update this Privacy Policy from time to time due to changes in product features, service providers, data processing methods, compliance requirements, or operational arrangements. The updated Privacy Policy will be published on the platform and will take effect upon publication or on the stated effective date. If material changes are involved, we will notify you through in‑platform notices, pop‑ups, email, or other reasonable means.

The Chinese and English versions of this Privacy Policy shall have equal legal force. In case of any ambiguity or conflict between the two language versions, the Chinese version shall prevail.

Contact Us

If you have any questions about this Privacy Policy, personal information processing, data security, account deletion, or rights requests, please contact us at:

Operator: Shenzhen Yueqian Weidu Technology Co., Ltd.
Email: support@vspace.ai