Legal
Privacy Policy
Last updated: June 15, 2026
See also Terms of Service.
This Privacy Policy describes how Twitch Apps LLC, doing business as Vlaze ("Vlaze" or "Vlaze AI," "we," "us," or "our"), collects, uses, discloses, and protects information when you use https://vlaze.ai and related services (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, do not use the Service.
1. Who We Are
Twitch Apps LLC is the data controller responsible for personal information processed through the Service, doing business as Vlaze.
Privacy inquiries: contact@vlaze.ai
Support: contact@vlaze.ai
2. Scope
This Privacy Policy applies to information we collect through the Service, including our web application, authentication flows, billing, AI tools, library and storage features, support channels, and marketing pages we operate.
It does not apply to third-party websites, apps, or services that may link to or integrate with the Service (such as payment processors or OAuth providers). Those parties have their own privacy policies.
3. Information We Collect
3.1 Information you provide
- Account information: email address, password (stored in hashed form by our auth provider), display name, profile photo (if supplied via Google sign-in or upload), and account preferences.
- Billing information: subscription tier, credit balance, transaction history, and billing-related identifiers. Payment card details are collected and processed directly by Stripe; we do not store full card numbers on our servers.
- User content: images, videos, audio files, text prompts, scripts, product definitions, reference uploads, library files, buckets/tags, and other materials you upload or generate through the Service.
- Communications: support tickets, bug reports, feature requests, email correspondence, and any information you choose to include in those messages.
- Marketing preferences: if we later offer promotional email, we will honor your opt-out choices as described in Section 8.
- Phone number: we do not require a phone number to use the Service at this time. If we later offer SMS features, we will update this Policy before collecting phone numbers for that purpose.
3.2 Information collected automatically
- Usage and activity data: tool usage, job history, task logs, credit charges and refunds, feature interactions, timestamps, error codes, and diagnostic metadata necessary to operate and secure the Service.
- Device and browser data: IP address, browser type, operating system, device identifiers, language settings, and general location derived from IP (city/region level).
- Cookies and similar technologies: session cookies required for authentication, preference cookies (such as UI settings stored locally or in cookies), and basic operational logs from our hosting infrastructure as described in Section 10.
- Referral and checkout data: URLs visited within the Service, Stripe checkout session identifiers, and onboarding funnels.
3.3 Information from third parties
- Authentication providers: if you sign in with Google, we receive information permitted by your Google account settings (such as name, email, and profile picture).
- Payment processor: Stripe provides payment status, subscription state, customer identifiers, and fraud-related signals.
- AI and infrastructure providers: when you run a job, necessary inputs (such as files and prompts) are transmitted to our backend processors to fulfill your request.
4. How We Use Information
- Provide, operate, maintain, and improve the Service, including all AI tools (image generation/editing, video generation, frame extraction, audio/voice tools, and related workflows).
- Authenticate users, secure accounts, prevent fraud and abuse, and enforce our Terms of Service.
- Process subscriptions, credit purchases, auto top-up (if enabled), refunds for failed jobs, and billing support.
- Store, organize, and deliver your library content; apply retention rules for unsaved files.
- Send transactional communications (account verification, password reset, billing receipts, security alerts, support ticket updates).
- Send marketing communications where permitted by law and your preferences (see Section 8).
- Analyze aggregated or de-identified usage to understand performance and plan product improvements.
- Train, evaluate, and improve our internal models, algorithms, and product functionality using Content as described in Section 6.
- Comply with legal obligations, respond to lawful requests, and protect our rights, users, and the public.
5. We Do Not Sell Your Data
We do not sell your personal information. We do not share your personal information with competitors for their own marketing or advertising purposes. We do not rent or trade your contact details to data brokers.
We may share information only as described in this Privacy Policy: with service providers who process data on our behalf under contract, when required by law, to protect rights and safety, in connection with a business transaction, or with your direction and consent.
Where applicable law defines "sale" or "sharing" broadly (such as under the California Consumer Privacy Act), we do not sell or share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide any required opt-out mechanism.
6. Use of Content to Improve Our AI and Product
You may submit or generate content through the Service, including uploads, prompts, outputs, edits, voice samples, feedback, and support messages ("Content").
You grant us a license to use Content to host, process, transmit, display, and backup Content as needed to operate the Service today.
Additionally, we may use Content—and technical data derived from your use of the Service (such as prompts, parameters, outputs, error logs, and aggregated usage patterns)—to develop, test, and improve our internal artificial intelligence models, automation systems, and product features. The primary purpose of this use is to improve Vlaze functionality, reliability, quality, safety, and user experience for our customers.
We may create de-identified or aggregated datasets that do not reasonably identify you and use those datasets for analytics, research, and product development.
We do not use your Content to build standalone products whose primary purpose is to compete with you in your specific business, and we do not sell your Content or personal data to third parties for their independent model training or advertising.
If we ever introduce a materially different use of Content for model training, we will update this Policy and, where required by law, provide notice or obtain consent before applying that use to previously collected Content.
7. How We Disclose Information
7.1 Service providers
We use trusted vendors who process data only on our instructions and for our purposes, including:
- Supabase — authentication, database, and file storage.
- Stripe — payment processing and subscription management.
- Vercel — application hosting, content delivery, and related infrastructure logs.
- Render — background workers and job processing infrastructure.
- Postmark — delivery of authentication and account-related email (configured through Supabase custom SMTP).
- AI inference and media processing providers (including current and future vendors) — to run the generative and editing jobs you request.
- Google — OAuth sign-in, if you choose that method.
- We do not currently use a separate vendor for marketing email campaigns. If that changes, we will update this Policy before sending promotional email at scale.
- We do not currently send SMS or text messages and do not use an SMS provider.
7.2 Legal and safety
- To comply with applicable law, regulation, legal process, or enforceable governmental request.
- To enforce our Terms of Service or investigate potential violations.
- To detect, prevent, or address fraud, security, or technical issues.
- To protect the rights, property, or safety of Vlaze, our users, or others.
7.3 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality obligations.
8. Email, SMS, and Marketing Communications
8.1 Transactional messages
We may send emails or in-app notifications that are necessary for the Service, including account verification, password resets, billing receipts, credit and subscription notices, security alerts, and support ticket replies. These messages are not marketing and generally cannot be opted out of while you maintain an active account, because they are required to provide the Service.
8.2 Marketing email
We do not currently send promotional or marketing email campaigns. If we introduce marketing email in the future, we will update this Policy and provide an opt-out mechanism (such as an unsubscribe link) before or when those messages begin. Transactional messages described in Section 8.1 are unaffected.
8.3 SMS and text messages
We do not currently offer SMS or text-message features and do not collect phone numbers for messaging. If we add SMS in the future, we will update this Policy and obtain any consent required by law before sending texts.
8.4 Push and in-app notifications
We may show in-app alerts (such as task completion or support replies) through the Service interface. You can manage certain notification preferences in Settings where available.
9. Data Retention
- Account data is retained while your account is active and for a reasonable period afterward to comply with law, resolve disputes, and enforce agreements.
- Unsaved library files may be automatically deleted after a limited retention window (currently seven (7) days from creation unless saved to your library). Saved files remain until you delete them or close your account, subject to plan limits and legal holds.
- Billing and transaction records are retained as required for accounting, tax, and fraud prevention.
- Support tickets and logs may be retained to provide support history and improve the Service.
- We may retain de-identified or aggregated data longer where it no longer identifies you.
- We may delete or anonymize information when it is no longer needed, subject to backup cycles and legal requirements.
11. Security
We implement administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and server-side processing of sensitive API operations.
No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your credentials and for activity under your account.
Notify us promptly at contact@vlaze.ai if you believe your account has been compromised.
12. Your Privacy Rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; and to withdraw consent where processing is consent-based.
California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to opt out of sale/sharing (we do not sell personal information as described in Section 5).
EEA/UK residents may have rights under GDPR, including lodging a complaint with a supervisory authority.
To exercise rights, email contact@vlaze.ai. We may verify your identity before responding. We will not discriminate against you for exercising privacy rights.
13. International Transfers
We are based in United States and may process information in the United States and other countries where we or our providers operate. Those countries may have different data protection laws than your jurisdiction.
Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
14. Children
The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact contact@vlaze.ai and we will take appropriate steps to delete it.
15. Third-Party Content and Links
If you supply URLs (for example, social media video links) or third-party materials for processing, you are responsible for ensuring you have the right to use that content. We process such materials only to provide the features you request.
16. Changes to This Policy
We may update this Privacy Policy at any time. When we do, we will revise the "Last updated" date at the top of this page and, where required by law or where changes are material, provide additional notice (such as email or in-app notification).
Your continued use of the Service after the effective date of an updated Policy constitutes your acceptance of the changes. If you do not agree, you must stop using the Service and may close your account.
17. Contact Us
Questions about this Privacy Policy or our data practices:
Email: contact@vlaze.ai