PRIVACY POLICY
Last updated: March 24, 2026
THE SHORT VERSION
- ● We collect only what we need to run the service: your email, your audio (temporarily), and basic usage analytics.
- ● Your audio is deleted after rendering. Your videos stay available while your account is active.
- ● We never sell your data. We use third-party services (listed below) only to operate VJ Studio.
- ● You can request access to, correction of, or deletion of your data at any time.
1. WHAT WE COLLECT AND WHY
| Data | Why | GDPR Basis |
|---|---|---|
| Audio files | Analyze and render your visualization | Contract performance |
| Song metadata (title, artist — optional) | Display track info in the video overlay | Contract performance |
| Email address | Account authentication, job status notifications | Contract performance |
| Custom logo (paid tiers) | Watermark your videos with your branding | Contract performance |
| Account & usage data | Manage your account, track credit usage, prevent abuse | Legitimate interest |
| Payment information | Process subscriptions (handled entirely by Stripe — we never see your full card number) | Contract performance |
| Analytics (Google Analytics 4) | Understand how the site is used, improve the product. We do not send names, emails, or user-generated content to Google Analytics. IP addresses are processed by Google but are not stored in full in our analytics reports. | Legitimate interest |
2. COOKIES
Authentication cookies — Session cookies to keep you signed in. These are essential for the service to work and expire when your session ends.
Google Analytics cookies — GA4 sets cookies (e.g., _ga,
_ga_*) that last up to 2 years.
These help us understand traffic patterns and usage. No PII is collected.
No advertising cookies. We do not use any advertising, retargeting, or tracking cookies from ad networks.
3. THIRD-PARTY SERVICES
We use the following third-party services to operate VJ Studio. Each processes only the minimum data necessary for its function.
| Service | Purpose |
|---|---|
| Supabase | Database, user authentication, file storage |
| Cloudflare R2 | Video file delivery (CDN) |
| RunPod | GPU rendering (processes audio/video on temporary cloud GPUs) |
| Netlify | Frontend hosting |
| Resend | Transactional email delivery |
| Google Analytics | Anonymized site usage analytics |
| Stripe | Payment processing and subscription management |
| Shazam API | Track identification in DJ sets |
| Replicate | AI-generated textures for visualizations |
4. DATA RETENTION
-
●
Audio files — Deleted from our servers after rendering is complete.
-
●
Generated videos — Available for download indefinitely while your account is active.
-
●
Account data — Retained while your account is active. Deleted within 30 days of account deletion.
-
●
Payment records — Retained as required by law (up to 7 years for tax and accounting purposes).
-
●
Analytics data — Google Analytics retains data for 14 months, then it is automatically deleted.
5. YOUR RIGHTS
Regardless of where you are located, you can:
- ✓ Access your personal data
- ✓ Delete your account and associated data
- ✓ Correct inaccurate personal information
- ✓ Download your data in a portable format
- ✓ Opt out of marketing communications
EU Residents (GDPR)
Under the General Data Protection Regulation, you also have the right to restrict processing, object to processing based on legitimate interest, and lodge a complaint with your local data protection authority.
California Residents (CCPA/CPRA)
Under the California Consumer Privacy Act and California Privacy Rights Act, you have the right to know what personal information we collect and share, the right to delete your data, and the right to opt out of the sale of personal information. We do not sell personal information.
To exercise any of these rights, email us at hello@vj.studio. We will respond within 30 days.
6. CHILDREN'S PRIVACY
VJ Studio is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.
7. DATA SECURITY
We take reasonable measures to protect your data:
- ● All connections use HTTPS encryption
- ● User authentication and database managed by Supabase with row-level security
- ● File storage uses access-controlled buckets
- ● Payment data handled exclusively by Stripe (PCI DSS compliant)
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.
No system is 100% secure. If you discover a security vulnerability, please report it to hello@vj.studio.
8. INTERNATIONAL DATA TRANSFERS
VJ Studio is operated from the United States. If you are located outside the US, your data will be transferred to and processed in the US.
For transfers from the European Economic Area, we rely on Standard Contractual Clauses approved by the European Commission to ensure your data receives adequate protection.
9. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For significant changes that affect how we handle your data, we will notify you by email.
10. CONTACT
Questions about this policy or your data? Reach us at hello@vj.studio.
Super Small Company, LLC