vem

Privacy Policy

Last updated: 2026-09-28

This Policy explains how Prodivant (sole proprietorship, representative: Genki Shirahama) ("we") handles personal data in vem (the "Service"). For users in the EU/EEA and the UK, we act as the controller of the data described below.

1. Data we collect

  • Account data: name, email address, password (stored as a one-way hash), organization name.
  • Connected network data: access tokens and account identifiers issued when you connect a social network (for example through Instagram Login), and the account username.
  • Content: the information you enter (themes, rules, schedules), material you upload, and the videos, images and captions we generate.
  • Performance data: views, reach, likes, comments, saves, shares and follower counts of published posts, retrieved from the connected networks.
  • Usage data: logs of generation, publishing and sign-in, including IP addresses, used for security and troubleshooting.
  • Payment data: payments are processed by Stripe; we do not store card numbers.

2. Purposes and legal bases

  • To provide the Service: generating content, publishing it at the times you set, and showing results (performance of a contract).
  • To keep the Service secure and prevent abuse, including rate limiting and fraud prevention (legitimate interests).
  • To send service emails such as password resets and failure notices (performance of a contract).
  • To comply with legal obligations such as tax and accounting records (legal obligation).

3. Processors and recipients

  • We share data only with the following providers, only to the extent necessary for the purposes above. We do not sell personal data.
  • Meta Platforms (Instagram API): publishing and retrieving performance data.
  • Anthropic and OpenAI: generating text and images. Your themes, rules and source material are sent as input.
  • Cloudflare: image generation and network services. Brave: web search for fact checking.
  • Hostinger: server hosting (United Kingdom). Resend: sending email. Stripe: payments.

4. International transfers

Our servers are located in the United Kingdom. The operator is based in Japan, and some providers process data in the United States. Japan and the United Kingdom are recognized by the EU as providing an adequate level of protection; for other transfers we rely on the providers' standard contractual clauses or equivalent safeguards.

5. Retention and deletion

  • We keep your data while your account is active. When you delete your account or ask us to, we delete your content, generated media and access tokens without undue delay, except records we must keep by law.
  • Temporary copies of media made available to social networks for publishing are deleted after publishing.
  • You can disconnect a social network at any time from the Connections page or from the network's own settings.

6. Your rights

  • You may request access to, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Contact us at the address below.
  • If you are in the EU/EEA or the UK, you may also lodge a complaint with your local data protection authority.

7. Security

Access tokens are encrypted at rest and can only be decrypted by the publishing process. Communication is protected by TLS. The AI that reads your text has no access to tools, keys or other customers' data.

8. Cookies

We use only the cookies needed to keep you signed in and to protect forms (session and CSRF cookies). We do not use advertising or analytics cookies.

9. Changes

We will announce changes to this Policy on this page.

10. Contact

Prodivant (sole proprietorship, representative: Genki Shirahama) / contact@prodivant.co