Version 1.0 · Effective 22 August 2026
VABRIUM PRIVACY POLICY Version 1.0 Effective: 22 August 2026 This policy explains what Vabrium collects, why, and what you can do about it. It covers the Vabrium desktop application and the vabrium.com website. The data controller is Vabrium LLC, a North Carolina limited liability company, of 4030 Wake Forest Rd Ste 349, Raleigh, NC 27609, United States. Contact: [email protected]. THE SHORT VERSION Vabrium edits your video on your own computer. Your gameplay footage, recordings, exports, and project files stay on your machine. We do not upload them, and we do not train our models on them. There is no analytics SDK in Vabrium. No Google Analytics, no Sentry, no Mixpanel, no advertising or tracking pixels. We do not sell or share your personal information, and we never have. What we do receive is listed below, and it is short. 1. WHAT WE COLLECT 1.1 Account information. If you create an account: your email address, an authentication credential, and account timestamps. Handled by our authentication provider (Supabase). 1.2 Subscription information. If you subscribe to a paid plan: a customer identifier, your plan, and its status and renewal dates. Your card details go directly to Stripe. We never receive or store your full card number, and we cannot charge a card outside Stripe. 1.3 Feature usage counts. The app records how many times you have used metered features — for example variant generations, background removals, and minutes of captions — and synchronises those counts with your account so your monthly allowance is consistent across your devices. These are counts, not content. We do not receive the clips, the captions, or what the features produced. 1.4 Support requests. If you send a support ticket: your message, the category you chose, the email address you supply (optional), and the app version. Our server also records the IP address the ticket came from, to limit abuse. You may optionally attach diagnostics. That attachment contains the app version, the build type, your operating system version, and the tail of the application log. The app displays the exact payload before it is sent, and the attachment is off unless you turn it on. Application logs can contain file paths and file names from your own machine, so read the payload before attaching it. 1.5 Website and downloads. Our website and download hosts record ordinary server-log information, including IP address, user agent, and what was requested. If you join the waitlist, we store the email address you give us and which page you came from. 1.6 Update checks. The app periodically requests an update manifest. That request reveals your IP address and the fact that a Vabrium install checked for updates. It carries no account identifier. 1.7 Entitlement check-in. While you are signed in, about once a day the app sends us what it currently believes your subscription to be — the tier and status it is showing you, and the dates it is working from — together with its own copy of the usage counts in 1.3, and the app version. We compare that against what your account was actually granted. The point is to notice when the two disagree, because that is how a copy of the app whose stored state has been edited to unlock paid features shows up, and how a free trial that has been restarted shows up. This is about your entitlement, not your behaviour. It carries no record of what you did in the app, when you did it, or what you made. If you are signed out, it is not sent at all. 2. WHAT WE DO NOT COLLECT * Your gameplay footage, recordings, exports, thumbnails, or project files. These never leave your computer. * The contents of your edits, your timeline, or your captions. * Your conversations with the in-app assistant. * Behavioural analytics, session recording, or advertising identifiers. * Your card number, CVC, or bank details. Vabrium stores its working data locally on your computer, under your Windows local application data folder. That includes projects, caches, thumbnails, logs, and preferences the app learns from your use. It stays there and is removed when you uninstall and delete that folder. 3. WHY WE USE IT, AND OUR LEGAL BASIS If you are in the European Union or the United Kingdom, the UK GDPR and GDPR require us to state a legal basis. Ours are: * To give you an account and provide the service you asked for — performance of a contract. (1.1, 1.2, 1.3) * To answer your support request — performance of a contract, and our legitimate interest in supporting our users. (1.4) * To attach diagnostics to a support ticket — your consent, given by ticking the box. You can decline and still get support. (1.4) * To send you waitlist or launch email — your consent. Every message has an unsubscribe link. (1.5) * To keep the service secure, prevent abuse, and prevent repeated misuse of free trials — our legitimate interests. (1.4, 1.5, 1.7) * To keep tax and payment records — a legal obligation. (1.2) 4. WHO WE SHARE IT WITH We do not sell your personal information. We do not share it for advertising. We do not disclose it for cross-context behavioural advertising. We use a small number of service providers who process data on our instructions: * Supabase — account authentication, database, and support tickets. * Stripe, Inc. — payment processing and subscription management. * GitHub, Inc. — hosting the installer and its download payload. We may disclose information if the law requires it, or where it is necessary to establish or defend a legal claim, or to protect someone's safety. If we are ever required to hand over user data, we will tell you unless we are legally prohibited from doing so. 5. INTERNATIONAL TRANSFERS We are based in the United States and our providers process data there. If you are in the European Union or the United Kingdom, your information is transferred outside your country. Where that transfer requires a safeguard, we rely on the European Commission's Standard Contractual Clauses, and the UK Addendum where applicable, through our agreements with the providers named above. 6. HOW LONG WE KEEP IT * Account and subscription data: for as long as your account exists, then deleted, except records we must keep for tax or accounting. * Feature usage counts: for the current and previous billing period. * Support tickets: up to 24 months, so we can recognise a recurring problem. * Waitlist emails: until you unsubscribe, or until 12 months after launch, whichever comes first. * Server logs: up to 90 days. 7. YOUR RIGHTS Wherever you live, you can email [email protected] to ask what we hold about you, correct it, or have it deleted. You can delete your account at any time and we will erase the associated data. If you are in the European Union or the United Kingdom you have the right to access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting processing already carried out. You may also complain to your national data protection authority. If you are a California resident you have the right to know what we collect, to delete it, to correct it, and to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any right. We will respond within 30 days. 8. CHILDREN Vabrium is not for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it. If you are in the European Union or the United Kingdom and under 16, a parent or guardian must consent before you create an account. 9. SECURITY Traffic between the app and our services uses HTTPS. Access to production data is limited to the accounts that need it. Payment card data is handled by Stripe and never reaches our systems. No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authority where the law requires it. 10. AUTOMATED DECISIONS We do not make decisions with legal or similarly significant effects about you by automated means. Vabrium's AI features analyse your video locally on your own computer; they do not profile you. 11. CHANGES We may update this policy. If a change is material we will notify you in the app or by email before it takes effect, and update the version and date above. Older versions are available on request. CONTACT Privacy [email protected] Legal [email protected] Support [email protected] Postal Vabrium LLC, 4030 Wake Forest Rd Ste 349, Raleigh, NC 27609, United States