Skip to main content
Vendy Logo
Sign InSign UpOffers

Version: United States.

View the version for another country

The version applicable to a purchase is determined by the billing country.

PRIVACY POLICY

Vendy Studio

Version 01 (US) - Last updated: 31/07/2026

This Privacy Policy explains how the Vendy Studio platform (the "Platform") collects, uses and protects your personal information.

A note for users in the United States. Vendy Studio is a French business. Because of that, the European General Data Protection Regulation (GDPR) applies to how we handle personal information regardless of where you live — so the protections and rights described below are available to you as a US user, not only to European users. We do not sell your personal information, and we do not share it in exchange for money or anything of value. Section 11 addresses US state privacy laws specifically.

1. Who is responsible for your data

The data controller is: VLA STUDIO – Mr François Vella, operating the Vendy Studio platform.

  • Registered address: 1A Rue Marcel Sembat, 62880 Vendin-le-Vieil, France
  • SIRET: 835 236 852 00025
  • Email contact: contact@vendystudio.fr

The website is hosted by: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

2. Personal information we collect

In the course of using the Service, Vendy Studio may collect the following categories of information:

  • Identification data: email address, account identifier;
  • Connection data: technical logs, IP address, browser type, dates and times of connection;
  • Browsing data (analytics): information relating to the use of the Platform (pages visited, events, analytics cookie identifiers), according to your choices;
  • Payment data: information relating to transactions (via Stripe — we never receive or store your full card details);
  • Uploaded content: photographs of garments (which may contain personal information if you do not comply with the content rules);
  • Usage data: number of generations, credit consumption, functional preferences;
  • Support-related data: exchanges by email;
  • Cancellation data: first name, last name, email address, order reference (or date and amount of the purchase) and free-text message, submitted through the online cancellation form — which is open WITHOUT an account, so this data may relate to a person who has never registered.
  • Abuse-prevention data (multiple accounts): at sign-up, a normalized form of your email address, an irreversible fingerprint (hash) of your IP address and a random technical device identifier (the "vs_did" cookie), used solely to check compliance with the one-free-account-per-person-and-household limit (Terms, § 5.1 bis). Your IP address is never stored in clear text.

The Service is not intended to process sensitive information. However, if you upload non-compliant content (for example a photograph containing an identifiable person, a home, or a name label), personal information may be processed incidentally. In that case, we reserve the right to delete the content concerned and/or restrict access to the Service in accordance with the Terms.

3. Biometric information — what we do and do not do

This section is provided for clarity because our Service processes photographs.

  • We do not perform facial recognition. We do not scan, extract, store or compare facial geometry, retina or iris scans, fingerprints, voiceprints, or hand geometry.
  • We do not create or retain biometric templates or identifiers, and we do not use any image to identify a person or to match a person against a database.
  • Our Service transforms photographs of garments. Our Content Rules prohibit uploading photographs containing an identifiable person, and we ask you not to do so.
  • If a photograph containing a person is uploaded in breach of our Content Rules, it is processed only to produce the requested image and is deleted on the schedule in section 6; it is not used to identify anyone.

4. Why we use your information

We process your information for the following purposes:

  • Provision of the Service (account creation, image generation, credit management) — to perform our contract with you;
  • Management of payments and fraud prevention — to perform our contract and for our legitimate interests;
  • Security and stability of the Platform — legitimate interests;
  • Analytics (for example Google Analytics) — only with your consent, via the cookie banner;
  • Advertising measurement and attribution (for example the Meta Pixel) — only with your consent, via the cookie banner;
  • Improvement of the Service (aggregated, non-identifying statistics) — legitimate interests;
  • Communications relating to the Service — to perform our contract;
  • Receipt, acknowledgment, handling and evidential retention of cancellation declarations — legal obligation and legitimate interests in evidencing those declarations;
  • Preventing abuse of free benefits (one free account per person and per household, detection of multiple accounts) — legitimate interests. Where detected, only free benefits are affected; a person reviews any challenge you raise (contact@vendystudio.fr).

We do not use your Source Photographs to train AI models, and we do not build or enrich reusable datasets from them.

5. Who receives your information

We use providers acting on our behalf to provide the Service:

  • Hosting / infrastructure: Vercel (hosting of the application, technical logs);
  • Database & storage: Supabase (storage of garment photographs and generated images, database);
  • Image generation: Google (GenAI) (generation of images from garment photographs);
  • Image generation & enhancement (additional models): Replicate (image generation and enhancement/upscaling from garment photographs);
  • Analytics: Google (Google Analytics) (Platform traffic statistics), subject to your consent;
  • Advertising measurement: Meta (Meta Pixel and Conversions API), subject to your consent;
  • Payment: Stripe (payment processing and fraud prevention);
  • Email: Resend (sending of transactional and support emails).

We may also share certain information with providers strictly necessary for security (fraud prevention, abuse mitigation) and the proper functioning of the Service, or where required by law.

No information is sold or rented to third parties.

6. How long we keep your information

  • Account data: duration of the contractual relationship + 3 years;
  • Payment / accounting data: as required by applicable accounting and tax obligations;
  • Technical logs: 6 to 12 months;
  • Uploaded and generated images: the period strictly necessary to provide the Service, and in any event deleted within 10 days of generation;
  • Abuse-prevention data: the IP fingerprint and device identifier are deleted no later than twelve (12) months after sign-up; the normalized form of the email address is kept for as long as the account exists;
  • Cancellation declarations: five (5) years from the declaration. They are retained as evidence even after the account is deleted: the email address is masked at that point, while the name and any message are kept, being necessary to identify the contract concerned.

7. Where your information is processed

Vendy Studio is established in France, and your information is processed in the European Union and by the providers listed in section 5, some of which are located in the United States. Where information is transferred outside the European Economic Area, we rely on appropriate safeguards recognized under the GDPR (in particular the European Commission's standard contractual clauses, or the EU–US Data Privacy Framework where the recipient is certified).

You may request information about these safeguards by writing to contact@vendystudio.fr.

8. Your rights

Because the GDPR applies to our processing, these rights are available to you wherever you live, including in the United States:

  • access your personal information;
  • have inaccurate information corrected;
  • have your information deleted, where applicable;
  • restrict or object to processing;
  • portability of the information you provided to us;
  • withdraw your consent at any time, where processing is based on consent (without affecting processing carried out beforehand);
  • object to direct marketing at any time.

To exercise your rights, write to contact@vendystudio.fr. We will respond within one month. We will not discriminate against you for exercising any of these rights — your access to the Service, your credits and your pricing are unaffected.

If you are not satisfied with how we handle your personal information, you may also lodge a complaint with the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL) — cnil.fr. We would appreciate the chance to address your concerns first.

9. Your choices about tracking

Analytics and advertising cookies are placed only after you consent via the cookie banner shown on your first visit, with separate controls for analytics and for advertising. You can accept all or reject all with equal ease, and you can change or withdraw your choices at any time via the "Cookies" link on the Platform. Rejecting non-essential cookies does not affect your access to the Service.

Our Cookie Policy describes each category of cookie, its purpose and its retention period.

10. Children

The Service is intended for adults and is not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18 — and, in any event, from any child under 13 within the meaning of COPPA. If you believe a person under 18 has provided us with personal information, please contact contact@vendystudio.fr and we will delete it.

11. Information for US residents

We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money or other valuable consideration.

Vendy Studio is a very small business, operated by one person. Based on our size and activity, we understand that we fall below the applicability thresholds of the California Consumer Privacy Act (CCPA/CPRA) and of the comprehensive consumer privacy laws currently in force in other US states — whether those laws set a revenue threshold, a threshold based on the number of consumers whose information is processed, or, in states that set no numerical threshold, an exemption for small businesses as defined by the US Small Business Administration.

We therefore do not operate the specific mechanisms those laws require of covered businesses — for example, we do not publish a "Do Not Sell or Share My Personal Information" link, because we do not sell or share personal information in the way those laws define, and we do not want to offer a mechanism that would not correspond to anything real.

This does not leave you without protection. As explained in section 8, the GDPR applies to our processing because we are established in France, and it gives you rights of access, correction, deletion, restriction, objection and portability that are broadly equivalent to — and in several respects broader than — those provided by US state privacy laws. You can exercise them at any time by writing to contact@vendystudio.fr, whatever state you live in, and we will not discriminate against you for doing so.

If our size or activity changes so that a US state privacy law becomes applicable to us, we will update this policy and implement the mechanisms that law requires.

12. Data security

Vendy Studio implements appropriate technical and organizational measures to protect your information (access controls, encryption, key management, logging, backups). However, no system is entirely free of risk.

13. Data breaches

In the event of a personal data breach likely to result in a risk to people's rights and freedoms, Vendy Studio will notify the competent supervisory authority without undue delay and, where the breach is likely to result in a high risk, will inform the individuals concerned. We will also comply with any applicable US state breach notification law.

14. Changes to this Policy

This Policy may be amended at any time. The applicable version is the one published on the Platform on the date the Service is used. We will inform you of any substantial change by appropriate means.