Privacy policy

1. Who is responsible

[Tên pháp nhân / Legal entity] (“we”) is the controller and processor of personal data for the Vertale app and the vertale.pages.dev website. Contact for personal data matters: hello@vertale.app.

2. Data we process

• Account: when you sign in with Apple or Google we receive your name, email (possibly an Apple private relay address) and an account identifier. Guest mode lets you shoot, edit and export without an account; captions and other AI features need you to sign in.
• Your content: videos, audio, captions, projects and your caption dictionary are stored on your phone. They only reach our servers when you turn on cloud sync (Pro) or run a cloud job, such as captions.
• AI jobs and credits: job type, language, audio duration, status and credits used, so we can charge credits and help you.
• Linked channels: channel name, connection status and the OAuth tokens TikTok, Instagram or YouTube issue when you allow it.
• Purchases: the App Store or Google Play handles payment. We only receive the transaction id, the product and your plan status, never card details.
• Diagnostics: crash reports (you can turn these off) and pseudonymised usage statistics, only with your consent.
• Waitlist: the email, language and page you signed up from on this website.
• Support: the content of emails you send us.

3. What runs on your phone

These run entirely on your phone, including in guest mode, and send your content nowhere: editing, rendering and export; face tracking for reframing (Apple Vision on iOS, Google ML Kit on Android); beat detection; silence detection from loudness; safe-zone checks.

Captions and speech-to-text do not run on your phone. They run in the cloud as described in section 4.

Face images and voice can be sensitive personal data under the law. Face analysis happens on-device only; we do not create or store biometric templates.

4. Cloud processing, only with your consent

These features run in the cloud: auto captions and everything based on a transcript of your speech (such as filler-word cuts and long video to shorts), translation, AI voice, dubbing, script and title writing, and chat editing. They need you to sign in and use AI credits. The first time you use one, the app asks for consent to cloud processing with a dedicated toggle, which you can withdraw at any time in Me, Account and security. Without that consent, these features do not run.

• We send only what the job needs (for example the audio for captions, or text for a title), over an encrypted connection.
• Audio and temporary files are deleted from our servers as soon as the job finishes, at the latest within 24 hours. Results (captions, translations, generated audio) are returned to the project on your phone.
• Model providers process data only on our instructions and may not use your content to train models.
• Dubbing in your own voice only runs with separate consent for that feature, and only with your own voice.

5. Labelling AI-generated content

Videos containing AI voice or AI dubbing carry an “AI-generated audio” marker in the file metadata, and the app suggests a matching label for the post description, in line with rules on AI-generated content.

6. Purposes and legal bases

• Providing the features you request (account, sync, AI jobs, publishing): to perform our contract with you and based on your consent.
• Processing purchases and Pro plans: contract performance and accounting and tax obligations.
• Crash reports and usage statistics: based on your consent.
• Sending the launch email to the waitlist: based on the consent you give when signing up.
• Security, fraud prevention and legal compliance: as permitted by law.

We do not sell personal data and do not use your content for advertising.

7. Who we share with

Processors handle data only under contract and on our instructions. They currently are:

• ElevenLabs: speech-to-text (captions and transcript-based features), English AI voices and dubbing.
• FPT.AI: Vietnamese AI voices.
• Anthropic: AI-generated text, such as scripts, titles, hashtags, translations and chat editing commands.
• Hosting, database and file storage ([Nhà cung cấp máy chủ và khu vực / Hosting provider and region]), crash reporting and email delivery services.

We also share data with:

• Platforms you choose to publish to (TikTok, Instagram, YouTube): the video, description and schedule you submit, under that platform’s terms.
• Apple and Google: for sign-in and purchases.
• Competent authorities: when the law requires it.

8. International data transfers

Vertale serves users in many countries. Our servers are located in: [Nhà cung cấp máy chủ và khu vực / Hosting provider and region]. The processors in section 7 may process data in the United States or other countries. Your data may therefore be transferred to and processed outside the country where you live, including outside Vietnam.

• Users in the European Union, the European Economic Area, the United Kingdom or Switzerland: when data goes to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses with the UK Addendum, or the EU–US Data Privacy Framework where the recipient participates.
• Users in Vietnam: we prepare, keep and update the impact assessment for transferring personal data abroad and file it with the competent authority, as required by the Personal Data Protection Law and its implementing rules.
• Users elsewhere: we apply the same protections and follow the transfer rules of the place where you live.

Everywhere, we transfer only the data a job needs, over encrypted connections, and only to parties bound by contract to protect it. You can ask us about these safeguards at hello@vertale.app.

9. How long we keep data

• Audio uploaded for captions and other AI jobs, and temporary files: deleted when the job finishes, at the latest within 24 hours.
• Account data and synced projects: until you delete them or your account; backups are purged within 30 days.
• Waitlist emails: until launch and the announcement email, or earlier if you ask us to delete them.
• Transaction records: for the period accounting and tax law requires.

10. Security

All connections use TLS. OAuth tokens for linked channels are encrypted: on the phone in the Keychain or Keystore, on the server with keys kept separate from the database. Internal access is role-based and audit-logged.

11. Your rights

You have the right to be informed, to consent or withdraw consent, to access, correct and delete your data, to restrict or object to processing, to receive a copy of your data and to complain, as provided by law.

• Data export: in the app, open Me, then Account and security, and download a JSON file with your account data.
• Account deletion: in the app or by email, see the Delete account page.
• Other requests: email hello@vertale.app. We reply within the time limits set by law.

You also have the right to complain to the data protection authority where you live, for example a supervisory authority in an EU member state or the Information Commissioner’s Office (ICO) in the United Kingdom.

12. Children

Vertale is not intended for children under 16. If you are under 16, you need the consent of a parent or guardian as required by law.

13. This website

This website sets no tracking cookies and runs no third-party analytics. When you join the waitlist, your email, language and the page name are sent to our server; your IP address is used only briefly to prevent abuse.

14. Changes to this policy

For significant changes we notify you in the app before they take effect and ask for consent again where the law requires.