VlexorLog inPrivacy Policy
Last updated: July 11, 2026
This Privacy Policy explains what personal data Vlexor ("Vlexor," "we," "us," or "our") collects when you use our website, web application, and desktop application (together, the "Service"), how we use and share that data, and the choices you have about it. It is written to describe specifically how Vlexor actually works — a command-bar and transcript-driven video editor — rather than generic boilerplate. By using the Service, you agree to the practices described here; if you don't agree, please don't use the Service.
Your raw video never leaves your device — full stop
This is the single most important thing to know about Vlexor's privacy model: your actual video and audio footage is never uploaded to our servers. Editing and rendering happen entirely on your own computer, powered by the FFmpeg engine bundled directly inside the Vlexor desktop app. We have no upload pipeline for your source footage or exports, so we architecturally cannot store or view them.
The one narrow exception: when you use the text-as-timeline feature (editing by deleting words from a transcript), the desktop app's local ffmpeg extracts a short, audio-only track from your footage. That audio clip — never the video — is briefly sent off-device to transcribe it, and once the transcript text and word-level timestamps come back, the audio itself is discarded. We do not keep a copy of the audio; only the resulting text and timestamps are saved to your project.
Information We Collect
We collect the following categories of personal data, generally in connection with an account you create:
Account information. When you create a Vlexor account with an email and password, we (via Supabase Auth, our authentication and database provider) store your name, email address, and a salted hash of your password — never your password in plain text.
Sign-in via Google, X, or Slack. If you sign in with Google, X, or Slack instead, we receive basic profile details from that provider — typically your name, email address, and profile photo — to create and authenticate your Vlexor account. We never see or store your password for that third-party account.
Billing information. Subscriptions (Pro, Pro+, Max) and one-time credit-pack purchases are processed by Polar, our merchant of record. Polar collects and stores your payment method and billing address and handles applicable tax on our behalf — Vlexor itself never receives or stores your card number or full payment details. We keep a record of your plan tier, credit balance, and transaction history (amounts, dates, plan changes) so we can manage your subscription and support you.
Usage and product data. We store the natural-language commands you type into the composer, the structured edit plans Vlexor generates from them, and — for the Adaptive Style Memory feature — signals about your editing preferences (such as pacing, caption style, and zoom intensity) inferred from your own past commands and exports, so future suggestions match your style. You can turn this off at any time in Settings → Profile → "Style learning"; once disabled, we stop recording new style signals from your activity.
Transcripts. When you use the text-as-timeline feature, we transcribe the audio-only extract described above using OpenAI's Whisper model and store the resulting transcript text and word-level timestamps against your project, so you can cut your video by editing text.
How We Use Your Information
We use the data above to:
- Provide the Service — authenticate you, sync your projects, and keep your account and billing in good standing.
- Power the AI features — generate EditPlans from your commands (Command Engine), extract pacing rules from a reference URL or description (Pacing Clone), predict intent for a live preview, and transcribe audio for text-as-timeline editing.
- Learn your editing style over time via Adaptive Style Memory, unless you've opted out.
- Communicate with you — service notices, security alerts, billing receipts, and responses to support requests.
- Maintain and secure the Service — diagnose bugs, monitor for abuse, and enforce our Terms of Service.
- Meet legal obligations, such as tax and accounting requirements tied to billing.
We do not use your data to build advertising profiles, and we do not sell it.
Who We Share Your Data With
We share personal data only with the specific third parties below, each for a specific purpose — never broadly with vaguely described "partners."
Supabase. our authentication, database, and hosting provider. Supabase stores your account records, project metadata, transcripts, and billing status on our behalf. Our Supabase project is hosted in the eu-central-1 region (Frankfurt, Germany).
Anthropic and OpenAI. process text — never your raw video or audio footage — server-side to power AI features: your command text (for EditPlan generation), transcript text (for text-as-timeline editing and style analysis), and pacing-analysis text or a reference video URL/description (for Pacing Clone). We route lighter tasks to a fast, low-cost model and heavier tasks (full edit-plan generation, style analysis) to a frontier model, from whichever of these two providers is configured as active. OpenAI's Whisper model also performs the transient audio transcription described above.
Polar. our payment processor and merchant of record. Polar receives what it needs to process your subscription or credit-pack purchase and handles all card data, invoicing, and tax on our behalf; Vlexor never touches your full card details.
We don't sell your personal data, and we don't share it with data brokers or advertising networks. We may disclose information if required by law (for example, a valid subpoena or court order), or to protect the rights, safety, and property of Vlexor, our users, or the public.
International Data Transfers
Supabase, our database provider, hosts our project in the EU (eu-central-1, Frankfurt). Anthropic and OpenAI are both U.S.-based companies. That means the specific text described above — your command text, transcript text, and pacing-analysis text or reference URLs — is transferred to, and processed in, the United States when we call these providers' APIs. Your raw video and audio footage is never part of that transfer, because it never leaves your device in the first place — see "Your raw video never leaves your device" above.
Where we transfer personal data outside the EU/EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses and the providers' own data-processing agreements, consistent with applicable data protection law.
Data Retention and Account Deletion
We keep your personal data for as long as your account is active, so we can provide the Service. Billing records may be retained longer where Polar or applicable law requires it for tax and accounting purposes, independent of your Vlexor account.
You can permanently delete your account at any time from Settings → Danger zone → "Delete my account." This immediately and permanently deletes your Supabase Auth user record, which cascades to remove every table tied to your account — your profile, projects, style profiles and style-memory events, command-run history, subscriptions and checkout-session records, credit-transaction history, and usage-bucket state. This action cannot be undone, so please be certain before confirming it.
Your Privacy Rights
Depending on where you live, you may have some or all of the following rights over your personal data, and we honor them for every Vlexor user regardless of location:
- Access — request a copy of the personal data we hold about you.
- Correction — fix inaccurate account details (update your name or email directly in Settings → Profile; contact us for anything else).
- Deletion — permanently delete your account and associated data from Settings → Danger zone, or by asking us to do it for you.
- Portability — request an export of your data in a portable format.
- Objection — object to, or ask us to restrict, certain processing, including opting out of Adaptive Style Memory at any time in Settings → Profile → "Style learning."
To exercise any of these rights beyond what's available directly in Settings, email us at vlexor.app@gmail.com — we'll verify it's really you and respond within a reasonable time.
Cookies and Session Tokens
Vlexor doesn't use third-party advertising or tracking cookies. Supabase Auth sets a secure, HTTP-only session cookie (and a refresh token) in your browser so you stay signed in between visits — this is strictly necessary for the Service to function and can't be disabled without signing out. The desktop app stores an equivalent session credential locally on your device for the same purpose.
Children's Privacy
Vlexor is not directed at children, and we don't knowingly collect personal data from anyone under 16 years old. If you believe a child has provided us with personal data, contact us at the email below and we'll delete it.
Security
We take reasonable technical and organizational measures to protect your data. AI provider API keys used to power Vlexor's AI features are encrypted at rest and handled only on our servers — never exposed to your browser or the desktop app. Access to your data in our database is scoped to your own account through row-level access policies, so one user's data isn't reachable from another user's session. Passwords are stored as salted hashes, never plain text.
No method of storage or transmission is 100% secure, and we can't guarantee absolute security — but protecting your data, and never touching your raw footage in the first place, is core to how Vlexor is built.
Changes to This Policy
We may update this Privacy Policy as Vlexor evolves. We'll update the "Last updated" date above when we do, and for material changes we'll make a reasonable effort to let you know directly (for example, by email or an in-app notice). Continuing to use the Service after an update takes effect means you accept the revised policy.
Contact Us
Questions, requests, or concerns about this policy or your data? Email us at vlexor.app@gmail.com.