Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains how VINCASO, operated by CV CIPTA BISNIS DIGITAL ("we", "us", "our"), collects, uses, and protects your information.

1. Information We Collect

• Account information: your name, email address, and Google account identifier - VINCASO accounts are created and accessed exclusively via Google Sign-In, so we never receive or store a password.
• Photos and generated images: the photo(s) you upload, the prompts/preset choices you submit, and the images we generate for you.
• Payment information: handled entirely by Paddle (our payment provider). We do not receive or store your card or bank details - only the resulting transaction status and amount.
• Usage data: basic technical logs (e.g. IP address, timestamps, error logs) used to operate and secure the Service.

2. How We Use Your Information

• To create and manage your account and token wallet;
• To process your uploaded photo(s) and generate the images you request;
• To process payments and top-ups via Paddle;
• To maintain security, prevent abuse, and enforce our Terms of Service;
• To communicate with you about your account or transactions.

3. How Your Photos Are Handled

Your uploaded photos and generated images are stored on our servers so you can view and download your generation history. They are sent to our AI image-generation provider (OpenAI) solely to produce the output you requested. We do not sell your photos, and we do not use your uploaded photos to train AI models.

4. Third-Party Services

We share the minimum data necessary with the following third parties to operate the Service:

• OpenAI - processes uploaded photos to generate your requested images.
• Paddle - processes payments and acts as Merchant of Record for your purchases.
• Google Sign-In - if you choose to log in with Google, Google shares your basic profile (name, email) with us for authentication.

5. Data Retention

We retain your account data, uploaded photos, and generated images for as long as your account is active, so you can access your generation history. You may request deletion of your account and associated data at any time (see Section 7).

6. Data Security

We use industry-standard measures (encrypted connections, Google's own account security, access controls) to protect your data. No system is completely secure, and we cannot guarantee absolute security.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at support@vincaso.com. We will respond within a reasonable time.

8. Children's Privacy

The Service is not directed at children under 18. We do not knowingly collect data from children under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after an update constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy can be sent to support@vincaso.com.