VBEAU
Back to the website

Last updated · July 12, 2026

Privacy Policy

This policy explains how VBeau collects, uses, shares, retains, and protects information while providing one-to-one fictional AI character companionship, and how you can manage your data.

1. Scope and operator

This policy applies to the vbeau.xyz website, accounts, conversations, and related services. VBeau is operated by an independent developer and acts as the controller for data whose purposes and means we determine directly.

For questions about this policy or personal-data processing, contact us at the support email shown on this page.

2. Information we collect

  • Account details: email address, optional nickname, email-verification status, and information you choose to add to your account.
  • Authentication and security data: hashed passwords, OAuth account identifiers, passkeys, two-step verification settings, session identifiers, IP address, user agent, and security-event records. We do not receive your third-party account passwords.
  • Conversation and generated content: your messages, character replies, conversation history, mood or scene data, fictional character images and audio, relationship stage, and memories extracted from conversations to maintain continuity.
  • Usage and device data: page visits, feature interactions, performance and error logs, cookies or similar identifiers, browser, and device information.
  • Billing data: internal user identifier, Creem checkout, customer and subscription identifiers, subscription status, and billing period. Full payment-card details are processed by Creem and are not stored in our database.
  • Communications: questions, attachments, and correspondence you send through email or in-product support.

3. How we use information

  • Create and secure accounts, including sign-in, email verification, password reset, and account deletion.
  • Provide text conversations, synthetic voice, fictional character images, history, relationship stages, and memory features.
  • Enforce content-safety rules and detect abuse, fraud, unauthorized access, and other security risks.
  • Process subscriptions, synchronize access, issue payment records, and provide billing support.
  • Analyze performance and usage, fix errors, improve features, and respond to support requests.
  • Meet legal obligations, enforce our terms, and protect users, the operator, and payment partners.

4. AI and content processing

To generate replies, audio, and images, relevant messages or scene descriptions derived from them are sent to providers of language models, moderation, text-to-speech, and image-generation services. We send only the information needed to fulfill the relevant request.

Conversations may undergo automated content-safety screening. Do not submit information you do not want processed by these providers, another person's sensitive data, or confidential material. AI output may be inaccurate and must not be treated as a statement from a real person or as professional advice.

5. Providers and disclosures

Selling personal data is not our business model, and we do not sell conversation content for third-party independent marketing. Providers may process information only as needed to deliver their services, meet legal obligations, and operate under their own terms.

  • Infrastructure and storage: Neon, Cloudflare, and other hosting or object-storage providers.
  • AI and safety: OpenRouter, Volcengine, EvoLink, and Creem Moderation when integrated as required before live payments.
  • Authentication and communication: Google, GitHub, Cloudflare Turnstile, Resend, and Crisp.
  • Analytics: Google Analytics, Plausible, and Microsoft Clarity when the relevant configuration is enabled.
  • Payments: Creem acts as Merchant of Record for checkout, taxes, payments, and subscription management.
  • Legal and safety: we may disclose information to authorities or professional advisers when legally required or necessary to investigate fraud, abuse, security incidents, or protect lawful rights.

6. Cookies, analytics, and support chat

Essential cookies support sessions, security settings, and language preferences. When configured, public pages may also load analytics, interaction analytics, and Crisp support tools to understand site performance and provide assistance.

You can clear or restrict cookies through your browser and use privacy controls offered by the relevant providers. Blocking essential cookies may prevent sign-in or security features from working.

7. Retention, conversation deletion, and account deletion

We retain information for as long as needed to provide the service, maintain security, resolve disputes, and meet legal obligations. Deleting a conversation removes it from the active list; deleting your account starts deletion of profile data, conversations, memories, and associated generated files.

Some records may remain for a reasonable period in restricted backups or where fraud prevention, financial, or legal retention requires it, after which they are deleted or de-identified. Independent providers such as Creem retain payment records according to their own legal obligations.

8. Your choices and rights

  • View and update editable profile details, manage sign-in methods, and delete conversations in your account.
  • Use account deletion to request deletion of your account and associated content.
  • Contact us to request access, correction, deletion, restriction, or portability where applicable law provides those rights.
  • Object to or withdraw consent-based processing. Withdrawal does not affect processing already carried out lawfully.
  • Complain to your local data-protection authority. We may verify your identity before completing a request.

9. Security

We use access controls, encryption in transit, hashed passwords, email verification, two-step verification, passkeys, rate limits, and security monitoring. No internet service can guarantee absolute security; use a unique strong password and protect your credentials.

10. International processing

Providers may process information outside your country or region. Where applicable, we rely on contractual arrangements, provider safeguards, or other legally recognized mechanisms for cross-border transfers.

11. Age restriction

The service is only for people aged 18 or older. We do not knowingly collect information from minors. If you believe a minor provided information, contact us so we can investigate and delete it or disable the account.

12. Changes and contact

We may update this policy as the product, providers, or legal requirements change. Material changes will be communicated through the website, in-product notice, or email, and the date above will be updated. Send privacy or data requests to the support email shown on this page.