Privacy Policy

This policy explains what Viblu LLC ("Viblu", "we", "us") collects, why, and what you can do about it. It covers everything we operate: https://viblu.com, the Viblu AI Film Studio, and Viblu TV — https://tv.viblu.com and the Viblu TV apps, described in Section 14.

This is the only privacy policy. It replaces every earlier one we published for an individual product, so there is a single source rather than several that drift apart.

1. What We Collect

You give us

• Account details — name, email address, and a password (stored only as a salted one-way hash, never in readable form).
• Profile details — anything you add, such as company name or the kind of filmmaker you are.
• Payment destination — the PayPal email address you enter to receive referral commissions, if you take part in our referral programme. We do not collect or store bank account numbers or card details. Card payments are handled entirely by our payment processor and never reach our servers.
• Your content — films, images, audio, voice recordings, screenplays, prompts, metadata and artwork you upload or generate.
• Tax information — where the law requires it before we can pay you, we may ask separately for a taxpayer identification number or a W-9. This is requested by email when it applies; it is not collected through the platform and no tax documents are uploaded to it.
• Messages — what you send us through contact forms or email.

We collect automatically

• Usage — pages visited, features used, actions taken, time spent.
• Analytics — only if you accept analytics cookies: how the site is used, measured with Google Analytics (Section 8).
• Device and log data — IP address, browser and operating system, access times, referring URLs.
• Approximate location — derived from your IP address, at city level.
• Consent records — the date, time, version and IP address when you accept our terms, confirm your email or change a consent setting. For a choice in the cookie banner we record the choice, its date and the banner version, a random ID kept in your browser, the page, your account if you are signed in, and your IP address shortened to its network (the last part removed). We keep these because they are the evidence that consent was given.

From third parties

• Service providers — payment status from our payment processor, delivery results from our email infrastructure.

2. How We Use It

• To provide, operate and improve the Services;
• To create and secure your account, and to verify that an email address given at sign-up belongs to the person registering, by sending a confirmation link to it;
• To calculate and pay referral commissions;
• To run the AI tools you use, including sending your inputs to model providers to return a result;
• To communicate with you about your account, purchases, referral commissions and support requests;
• To send service notices, security alerts and administrative messages;
• To detect, investigate and prevent fraud, abuse and security incidents;
• To comply with legal, tax and accounting obligations, and to enforce our terms.

Legal bases (EEA, UK and Switzerland)

• Contract — to provide the Services you signed up for: your account, the AI tools, purchases and referral payouts;
• Legitimate interests — to keep the Services secure, prevent fraud and abuse, fix and improve them, and tell you about your account. You can object to this processing (Section 7);
• Consent — for analytics cookies, for training models on your content, and wherever else we ask for it. You can withdraw it at any time;
• Legal obligation — for tax, accounting and lawful requests.

3. AI Processing and Model Training

The AI Film Studio sends what you submit to a tool — your prompts, screenplays, images and related inputs — to automated systems, including third-party model providers, in order to return a result. Those providers process it under their own terms for that purpose.

We use your inputs and outputs to train models only with your consent. You give, refuse and withdraw that consent in your account settings, and we record the version and date of your choice. Withdrawing consent applies going forward; it cannot retrospectively remove data from a model that has already been trained, and we will not claim otherwise.

We do not sell your content, and we do not share it with anyone other than the providers needed to deliver the tool you asked for.

Voices: recordings, cloning and dubbing

Some tools work with voices. This is what happens to them:

• Designing a character's voice. A voice can be designed from a written description of the character. If you add a recording as a reference, we ask you to confirm that it is your voice or that you have the speaker's permission to use it. The recording and the description are sent to our voice provider to create the voice, and the resulting voice sample is kept in your account.
• Voice-overs and captions. Text you want read aloud is sent to our voice provider and read in a stock voice. Audio you ask us to caption or time (for example a song's lyrics) is sent to the same provider to be transcribed.
• Dubbing. When you dub a video, the video file is sent to our voice provider. It identifies the speakers, transcribes and translates what they say, and speaks it in the new language in voices recreated from the speakers' own voices in that video (a "voice clone"), unless you choose similar stock voices instead. You get back the dubbed video and subtitles. Each voice clone is made for that dub only. Once the dub and its subtitles reach your account, we delete the dubbing project at the provider.
• Your confirmation. Before dubbing, you confirm that you have the right to dub the voices in the video: that the people speaking, or whoever holds the rights to their performance, have agreed. Do not upload or dub anyone's voice without that permission.
• What we do not do. We do not use voices to identify anyone, we do not create voiceprints for identification or authentication, and we do not sell voice recordings or voice clones. Voices are used only to make what you asked for, and are used to train models only with your consent (above).

Voice recordings, voice samples and dubbed videos are your content: they stay in your account until you delete them, and they are deleted with your account.

4. How We Share

• Service providers — hosting, payment processing, email delivery, AI model providers, and analytics (Google Analytics, only if you accept analytics cookies). They act on our instructions and are contractually limited to the purpose we disclosed.
• Legal — where required by law, legal process or government request, or where we believe disclosure is necessary to protect rights, property or safety, to address fraud or security issues, or to enforce our terms.
• Business transfers — in a merger, acquisition, financing, reorganisation, bankruptcy or sale of assets, in which case we will tell you about any change in ownership or use of your information.
• With your consent — anything else.
• Aggregated or de-identified data — information that cannot reasonably be used to identify you.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as "sell" and "share" are defined under the CCPA and similar US state laws, or sell it as defined under Nevada law.

5. Security

What we actually do:

• All traffic to and from the platform is encrypted in transit (HTTPS);
• Passwords are stored only as salted one-way hashes and are never readable by us;
• Your projects, screenplays and generated media are stored outside the public web root and served only to you through an access check; when a render needs one of your files, the provider receives a link that works only for a limited time;
• Uploaded and generated files are checked by their content, not by the type they claim: only genuine images, video and audio are shown in the browser, anything else is kept as a download;
• Access controls limit which staff can see personal information and submitted content;
• Administrative activity is logged and monitored.

We do not encrypt stored files at rest beyond the protections our hosting infrastructure provides. We would rather tell you that than imply a protection we have not implemented.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

6. How Long We Keep It

We keep personal information for as long as your account is active, and afterwards as described here.

Records retained after you close your account. Closing your account removes your profile, your login, and your projects and files. We retain:

• Payout records for referral commissions — tax and accounting law requires us to account for payments made;
• Consent records — evidence that terms were accepted and when;
• Billing and usage history for paid services.

We cannot delete these records on request.

When we no longer need information for these purposes, we securely delete or anonymise it.

Material sent to an AI provider to make a result is kept by that provider under its own terms; dubbing projects are deleted at the provider as soon as the dub and its subtitles have reached your account.

7. Your Rights

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you;
• Correct information that is inaccurate or incomplete;
• Delete your personal information, subject to the retention limits in Section 6;
• Port your data in a structured, machine-readable format;
• Restrict or object to certain processing;
• Withdraw consent where processing is based on it, including AI training consent and analytics cookies;
• Opt out of the sale or sharing of your personal information — we do neither, and we treat a Global Privacy Control signal from your browser as an opt-out (Section 8);
• Not be discriminated against for exercising any of these rights.

Contact us using the details in Section 13. We may need to verify your identity first, and we will respond within the period the applicable law requires. If you are in the European Economic Area, the United Kingdom or Switzerland, you can also lodge a complaint with your local data protection authority.

8. Cookies

Cookies are small text files a website stores in your browser. We keep them to a minimum: a first visit to https://viblu.com sets no cookies, and our fonts and scripts are served from our own servers.

Cookies we need to run the Services

These are set only when you use the feature they belong to. They do not need your consent, because the Services cannot work without them.

• wordpress_logged_in_…, wordpress_sec_…, wordpress_test_cookie — keep you signed in; until you close your browser, or 14 days if you tick "Remember me";
• wp-resetpass-… — lets you set a new password from the link we email you; until you close your browser;
• aiox_curproj — remembers the project you are working on in the AI Film Studio; 12 months;
• aiox_consent — remembers your choice in the cookie banner, with a random ID that links it to our record of that choice; 12 months;
• aiox_lang — remembers the language you chose; 12 months;
• __stripe_mid, __stripe_sid — set by Stripe, our payment processor, only when you start a payment, to process it securely and prevent fraud; 1 year and 30 minutes.

Analytics cookies — only with your consent

If you click "Accept analytics" in the cookie banner, we use Google Analytics 4 to understand how the Services are used: which pages are visited and how people find us. Google Analytics is not loaded at all until you accept. We do not use it for advertising: its advertising features are off, and we send Google no names or email addresses.

• _ga, _ga_… — Google Analytics: tells visits apart and counts them; 2 years.

Google Analytics is provided by Google Ireland Limited and Google LLC, which process this data for us. Google Analytics does not store your full IP address, and we have Google keep Analytics data for 14 months. See Google's privacy policy.

If you accepted analytics cookies before signing up, we keep the anonymous Google Analytics identifier with your account, so that a later purchase can be attributed to the visit that brought you here. If you did not, we keep nothing of the kind and send no purchase events about you.

Global Privacy Control and Do Not Track

If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies: the banner is not shown and Google Analytics is not loaded, unless you accept it yourself in Cookie settings. Our Services do not respond to "Do Not Track" signals.

Stored in your browser only

Some display preferences (such as a zoom level or which panels are folded) are kept in your browser's local storage, and so is the history of your conversation with our help chat, so it is still there when you come back. These stored copies stay on your device and are not used for tracking; what you type in the help chat is sent to us to answer it, like any other request.

Changing your choice

You can change your mind at any time with the Cookie settings link at the bottom of the site's pages, or here. If you withdraw consent, we stop Google Analytics and delete its cookies from your browser. You can also block or delete cookies in your browser settings; the cookies we need to run the Services are required to sign in and to pay.

9. International Transfers

We are based in the United States and your information is processed there, and potentially in other countries where our service providers operate. Those countries may have different data protection laws. Where we transfer personal information internationally we take steps to keep it protected in line with this policy.

For personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on the recipient's certification under the EU-U.S. Data Privacy Framework (and its UK Extension and the Swiss-U.S. Data Privacy Framework) where it has one — Google, for example — and otherwise on the European Commission's Standard Contractual Clauses or another transfer mechanism the law recognises.

10. Children

The Services are for people aged 18 and over. We do not knowingly collect personal information from children. If we learn that we have, we will delete it. If you believe a child has given us information, contact us immediately.

11. Other Sites

The Services link to third-party sites and services we do not control, including the AI and video providers that process your requests. This policy does not cover them. Read their policies before giving them information.

12. Changes

We may update this policy. When we do, we change the version and revision date at the top of this page, and for material changes we will give notice. Continuing to use the Services after a change takes effect means you accept it.

13. Contact

Viblu LLC
1309 Coffeen Avenue STE 17388
Sheridan, WY 82801
United States
Email: mail@viblu.com
Web: https://viblu.com/contact/

We will respond within a reasonable time.