The short version. We collect what we need to run Vupie and nothing for advertising. There are no analytics or tracking cookies on this site. To make your film, we send your script, prompts and voice text to the AI providers named below, and only for that. We do not sell personal data, and we do not use your projects to train AI models.
1. Who we are
Vupie ApS ("Vupie", "we", "us"), CVR 44108879, runs vupie.com and Vupie Studio, a service that turns an idea into a finished video. We are based in Denmark. For the personal data described here we are the data controller under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.
You can reach us about anything in this policy at [email protected].
2. What we collect
When you visit vupie.com
- Request data. Like every website, our server and our network provider Cloudflare receive your IP address, browser and device type, the page you asked for and the time. We use it to deliver the site, keep it secure and stop abuse.
- Nothing else. The public site has no analytics, no advertising pixels, no social media plugins and no third-party scripts. Its fonts and code are served from our own domain.
When you sign up for the beta
- Your email address, and where on the site you signed up (for example which showcase film you clicked), so we know what you came for.
- Your idea, if you typed one into the prompt box on the home page before signing up. It is kept with your sign-up so we know what film you want to make.
- If you choose "Continue with Google": Google tells us your name and your verified email address. Nothing else: not your contacts, files or anything in your Google account.
When you use Vupie Studio
- Account. Your email address and your password, which we store only as a salted scrypt hash, never in plain text. Optionally your name and company, if you add them to your profile.
- Your projects. What you put into Vupie and what it makes for you: ideas, scripts, scenes, prompts, instructions you type to the AI director, files you upload (images, logos, data such as CSV files), voice settings, generated narration, footage and renders, and the version history of each project.
- Usage records. Render jobs and their status, and technical logs, so we can run the queue, find faults and see what a generation cost.
- Messages. If you email us, your email and what you write.
We do not ask for and do not want special categories of personal data (such as health, religion or political opinions). Please do not put them in your projects.
3. Why, and on what legal basis
| What we do | Data | Legal basis (GDPR) |
|---|---|---|
| Keep the beta waiting list, and email you when your account is ready | Email, name (with Google), where you signed up, the idea you typed | Steps you asked for before a contract, Art. 6(1)(b) |
| Provide the studio: sign-in, projects, generation, rendering, support | Account, projects, usage records, messages | Contract, Art. 6(1)(b) |
| Deliver and protect the website and the service, prevent abuse | Request data, logs | Legitimate interests, Art. 6(1)(f): a working, secure service |
| Tell you about changes to the service or these terms | Contract, Art. 6(1)(b) | |
| Keep accounts and invoices once paid plans exist | Billing details | Legal obligation, Art. 6(1)(c): the Danish Bookkeeping Act |
We do not use your data for advertising, we do not build profiles of you, and we make no decisions about you by automated means that have legal or similarly significant effects.
4. AI providers and other processors
Vupie is built on specialist providers. Each one receives only what it needs for its part of the film, when you ask for that part.
| Provider | What it does for Vupie | What it receives |
|---|---|---|
| Anthropic (Claude) | Writes and changes scripts and scenes when you ask the AI director | The relevant script and scene content, your instruction, and still frames of the scene so it can check its work |
| ElevenLabs | Narration voices | The text to be spoken and the voice settings |
| Kie.ai, and through it the model makers ByteDance (Seedance), Google (Veo) and Kuaishou (Kling) | Generates video footage | The shot prompt and any reference images you choose to use |
| Google (Sign in with Google) | Confirms who you are when you choose "Continue with Google" | That you are signing up for Vupie; Google's own sign-in handles the rest |
| Cloudflare | Delivers and protects the website | Request data as described in section 2 |
The studio itself, your projects, uploads and renders, and the account database live on a server we operate ourselves. We do not sell personal data to anyone. Each provider handles what it receives under its own terms and privacy policy. If you are a business and need a data processing agreement with us, ask and we will sign one.
5. Transfers outside the EU
Some of the providers above process data outside the EU and EEA, for example in the United States. Where they do, the transfer relies on an EU adequacy decision (such as the EU-US Data Privacy Framework, for providers certified under it) or on the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguard that applies to a given provider.
6. Cookies and local storage
vupie.com sets one cookie, and only one:
| Name | Purpose | Lasts |
|---|---|---|
vupie_session | Keeps you signed in, protects forms against cross-site request forgery, and holds a one-time security code while you sign up with Google. Signed so it cannot be altered. | Up to 14 days |
It is strictly necessary for the service, so it does not need your consent and we do not show a cookie banner. There are no analytics, advertising or third-party cookies.
The studio also remembers interface preferences, such as light or dark theme and panel layout, in your browser's local storage (vupie.theme, vupie.ui). That stays on your device and is never sent to us.
7. How long we keep data
- Account and projects: for as long as your account is open. You can ask us to delete a project, or your whole account, at any time. When an account is closed we delete its account data and projects within 30 days.
- Beta waiting list: until your account is opened, and no longer than 12 months. Ask us any time and we take you off the list.
- Server logs: up to 30 days, unless we need them longer to investigate a specific security incident.
- Emails: as long as needed to handle your request, and no longer than our dealings with you require.
- Accounting records: five years from the end of the financial year, as the Danish Bookkeeping Act requires, once paid plans exist.
Providers in section 4 keep data according to their own retention rules.
8. People in your films
Your projects can contain personal data about other people, for example a staff photo, a name on an end card or a voice. For that content you decide what goes in and why, so you are the controller and we process it on your behalf to make your film. You are responsible for having a lawful basis and, where needed, the consent of the people shown. Our acceptable use rules cover this too.
9. Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access), and receive it in a portable format;
- correct data that is wrong;
- delete your data;
- restrict how we use it, or object to processing based on our legitimate interests.
Write to [email protected]. We answer within one month and may ask you to confirm who you are. You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk, or to the authority where you live.
10. Security
The site is served only over HTTPS. Passwords are stored as salted scrypt hashes. Every change you make in the studio must carry a per-session security token. Your private files and studio data are marked so that neither Cloudflare nor your browser caches them. Access to the server is limited to the people who run Vupie. No system is perfectly secure, and if a breach affects your data we will tell you and the authorities as the law requires.
11. Children
Vupie is a tool for businesses and professionals and is not meant for anyone under 18. We do not knowingly collect data about children.
12. Changes
When this policy changes, we update the date at the top. If a change matters for how we use your data, we tell signed-up users by email before it takes effect.
13. Contact
Questions, requests or complaints: [email protected].